Reset admin password at Plesk not working properly

[InfranetworkingI]

Hello guys,

I have no experience with Plesk and have some kind of issue. Latest Plesk version with CentOS 5.x.

I changed plesk 'admin' password for another new one because someone at the office leaved the company and we have to secure passwords.

So, did the change from Plesk Admin Panel.

The problem, now I'm able to login with both passwords, the old one and the new one...

cat /etc/psa/.psa.shadow shows only the new password.

Any clue about what this could be?

Thanks.

 

[IgorG]

Try to use /usr/local/psa/admin/sbin/ch_admin_passwd utility. --help option for details.

 

[HéctorD]

our admin user has two passwords !!!!!

We have the same problem, our admin user has two passwords

We can change one of these passwords, using commands like:

/usr/local/psa/admin/sbin/ch_admin_passwd

And after

- we can see the changes in the /etc/psa/.psa.shadow file
- we can see the changes if we execute this command /usr/bin/mysql -D mysql -u admin -p -e"select user,Password from user where User='admin';"

We have changed the field Password directly in the mysql database, also.

But exist one admin password that is always the same and we can't change.

Where is saved this admin password? out of the mysql database?

Can you help me?
Thanks

 

[IgorG]

I do not understand what is wrong here? In .psa.shadow and in database password is encrypted and if you want to see real Plesk admin password you should use

# /usr/local/psa/bin/admin --show-password

command.
For example:

# /usr/local/psa/bin/admin --show-password
setup

# cat /etc/psa/.psa.shadow
yet3iE6iJjo=

# /usr/bin/mysql -D mysql -u admin -p`cat /etc/psa/.psa.shadow` -e "select user,Password from user where User='admin';"
+-------+------------------+
| user | Password |
+-------+------------------+
| admin | 06d590c01848f42e |
+-------+------------------+

 

[HéctorD]

the problem is that we have two passwords for admin

Hello

Thanks for your answer

The problem is that we have two passwords for admin, we can login using admin/11111 and using admin/22222

user : admin , password : 11111
user : admin , password : 22222

I understand that the password is saved in /etc/psa/.psa.shadow and is saved in the mysql database.

We can login with this password "11111" without problems, and we can change this "11111" password without problems, but also we can login with the other "22222" password (the problem is this second admin password : "22222")


We have changed the file and the database field manually and with the psa commands, but we can login with two passwords "the new 11111" password and the "22222" password

When we change the admin password, only is changed one of them "11111", the second "22222" password is not changed.

Thanks

 

[IgorG]

Maybe you have other account with 'admin' name?

 

[HéctorD]

I think that we have only one admin user

Hello

I think that we have only one admin user

mysql> use mysql
mysql> select User from user where user='admin';
+-------+
| User |
+-------+
| admin |
+-------+
1 row in set (0.02 sec)

Do you know another table or file where we can find the admin user?

Thanks for your fast answers

 

[IgorG]

I meant Plesk database psa. For example:

select * from smb_users where login='admin';
select * from clients where login='admin';

 

[HéctorD]

only one user admin in mysql psa database

Hello


mysql> select id,login from smb_users where login='admin';
+----+-------+
| id | login |
+----+-------+
| 1 | admin |
+----+-------+
1 row in set (0.00 sec)

mysql> select id,login,account_id from clients where login='admin';
+----+-------+------------+
| id | login | account_id |
+----+-------+------------+
| 1 | admin | 0 |
+----+-------+------------+
1 row in set (0.00 sec)


Thanks

 

[HéctorD]

I've tried make a strace of some psa commands...

Do you need any other information?

I've tried make a strace of some psa commands but I've received the message:
DEBUGGER DETECTED... Bye!

I don't know where search information about low level psa architecture.

Any help is wellcomed

Thank you very much

 

[IgorG]

Do you have any differences in interface, permissions, etc when you login as admin with different passwords?

 

[HéctorD]

All info in the user profile is identical

All info in the user profile is identical, email, name, adress ....

Also if I login with the admin from two pc with the two passwords, plesk show one warning that say :

"Advertencia: En el Panel ya ha iniciado sesión otro usuario con el mismo nombre de usuario (admin). "

Thanks