Cannot create additional ftp users

[kadoudal]

trying to add new ftp users , I always get the error message :

Error: SysUser::update() failed: Unable to create system user: usermng: PAM password change failed: 24, Failed preliminary check by password service

what does it means ?

PLESK 10.0.1 / CENTOS

 

[IgorG]

It seems that PAM subsystem is broken. Check that you have not duplicated pam packages installed for different platforms with following command at least:

# rpm --qf "%{n}-%{version}-%{release}_%{arch}\n" -qa |grep pam

Try to remove extra packages. If you can't fix it by yourself - contact support team.

 

[kadoudal]

pam extra packages ?

here is the list generated by : rpm --qf "%{n}-%{version}-%{release}_%{arch}\n" -qa |grep pam

pam_pkcs11-0.5.3-23_i386
pam_smb-1.1.7-7.2.1_i386
pam-0.99.6.2-6.el5_4.1_i386
pam_ccreds-3-5_i386
pam_passwdqc-1.0.2-1.2.2_i386
pam_krb5-2.2.14-15_i386
psa-libpam-plesk-10.9.0-cos5.build109101029.17_i386

which one should I remove ? ( I upgraded from 9.3 to 10.0.1 )

 

[IgorG]

It looks correct and there are no duplicated packages. Root cause is deeper and investigation directly on server is required. Maybe PAM packages reinstallation will help, but I'm not sure.

 

[kadoudal]

Thanks Igor
I run , this but it doesn't show any pending problem :

usr/local/psa/pam_plesk_config/pam_plesk_install -f /etc/pam.conf -m /usr/local/psa/pam_plesk/pam_plesk.so -v

DEBUG:Loading PAM configuration from (directory="/etc/pam.d", file="/etc/pam.conf")
INFOAM configuration loaded from (directory="/etc/pam.d", file="/etc/pam.conf"). Configuration contains 44 file(s)
DEBUG:calculating changes for 'auth' stacks
DEBUG:initial services: autonomous = set(['halt', 'eject', 'pm-hibernate', 'pm-suspend', 'pm-powersave', 'reboot', 'kbdrate', 'poweroff', 'other', 'system-auth-ac', 'pm-suspend-hybrid', 'kshell', 'ekshell']), commonDict = {'runuser': set(['runuser-l']), 'system-auth': set(['gssftp', 'proftpd', 'dateconfig', 'ppp', 'imap', 'system-config-date', 'ksu', 'sudo-i', 'newrole', 'system-config-time', 'chfn', 'atd', 'pop3', 'run_init', 'crond', 'sshd', 'remote', 'su-l', 'postgresql', 'login', 'passwd.rpmnew', 'chsh'])}
DEBUG:installed dropped: autonomous = set(['poweroff', 'halt', 'eject', 'pm-hibernate', 'pm-suspend', 'reboot', 'ekshell', 'kbdrate', 'pm-powersave', 'other', 'kshell', 'pm-suspend-hybrid', 'system-auth-ac']), commonDict = {'runuser': set(['runuser-l']), 'system-auth': set(['gssftp', 'proftpd', 'dateconfig', 'ppp', 'imap', 'system-config-date', 'ksu', 'sudo-i', 'newrole', 'system-config-time', 'chfn', 'atd', 'pop3', 'run_init', 'crond', 'sshd', 'remote', 'su-l', 'postgresql', 'login', 'passwd.rpmnew', 'chsh'])}
DEBUG:autonomous checkers = {'system-auth-ac': 1}, autonomous = set(['poweroff', 'halt', 'eject', 'pm-hibernate', 'pm-suspend', 'reboot', 'ekshell', 'kbdrate', 'pm-powersave', 'other', 'kshell', 'pm-suspend-hybrid'])
DEBUG:commonCheckersDict = {'system-auth': set(['gssftp', 'proftpd', 'dateconfig', 'ppp', 'imap', 'system-config-date', 'ksu', 'sudo-i', 'newrole', 'system-config-time', 'chfn', 'atd', 'pop3', 'run_init', 'crond', 'sshd', 'remote', 'su-l', 'postgresql', 'login', 'passwd.rpmnew', 'chsh'])}, commonDict = {'runuser': set(['runuser-l'])}
DEBUG:autonomous = {'kshell': 4, 'ekshell': 4}, commonDict = {}
INFO:calculated 4 position(s) to change 'auth' stacks
DEBUG:changes = [('system-auth-ac', 1, 'sufficient'), ('system-auth', 1, 'sufficient'), ('kshell', 4, 'required'), ('ekshell', 4, 'required')]
INFO:required 'auth' stack(s) modified (in memory)
DEBUG:calculating changes for 'password' stacks
DEBUG:initial services: autonomous = set(['passwd', 'system-auth-ac', 'other', 'plesk_usermng_encrypted']), commonDict = {'system-auth': set(['sshd', 'remote', 'chfn', 'sudo-i', 'su-l', 'newrole', 'run_init', 'passwd.rpmnew', 'chsh', 'login'])}

DEBUG:S3:Traceback (most recent call last):
File "/usr/local/psa/pam_plesk_config/pam_plesk_install.py", line 357, in main
KnownPasswordSetters, KnownNonPasswordSetters)
File "/usr/local/psa/pam_plesk_config/pam_plesk_install.py", line 221, in getPasswordChanges
changes.append((svc, position, pswdCA.getAddStyle(svc, position, confSet)))
File "/usr/local/psa/pam_plesk_config/PAMConfig/analyzers.py", line 265, in getAddStyle
raise NotImplementedError("do know how to deal with atom:\n%s" % (theAtom,))
NotImplementedError: do know how to deal with atom:
password optional pam_plesk.so try_first_pass

CRITICAL:4:some functionality isn't yet implemented

 

[IgorG]

Try to reinstall with force this package http://64.131.90.31/PSA_10.0.1/dist...-plesk-10.9.0-cos5.build109101029.17.i386.rpm

 

[kadoudal]

reinstall package

are you sure about the url ?


No package http://64.131.90.31/PSA_10.0.1/dist...-plesk-10.9.0-cos5.build109101029.17.i386.rpm available.
Nothing to do

 

[kadoudal]

sorry , did it the wrong way (using yum)
now with rpm

rpm -i --force psa-libpam-plesk-10.9.0-cos5.build109101029.17.i386.rpm
Trying to install PAM module... done

 

[kadoudal]

same error after installing package

same issue after installing the package http://64.131.90.31/PSA_10.0.1/dist...-plesk-10.9.0-cos5.build109101029.17.i386.rpm

Error: SysUser::update() failed: Unable to create system user: usermng: PAM password change failed: 24, Failed preliminary check by password service

should I restart Plesk ? btw ; how can I restart Plesk via ssh command ?
last week , I used 'restart' in the Admin GUI console and it 'shutdown' my remote server ..... I had to send someone in London to restart it....

 

[IgorG]

You can restart Plesk with

/etc/init.d/psa stop
/etc/init.d/psa start

 

[kadoudal]

Please click one of the Quick Reply icons in the posts above to activate Quick Reply.

 

[kadoudal]

thanks , I noted it .. but I never used ... until now ... I'll note it again with BIGGER FONTS

Q1: is it normal that upon restarting psa ,
Starting drwebd service... failed

I has to stop/start it again
service drwebd stop
Shutting down Dr. Web daemon.

service drwebd start
Starting Dr. Web daemon...
...
Daemon is installed, active interfaces: /var/drweb/run/.daemon 127.0.0.1:3000

Q2 : we only have 14 email boxes , does it worth buying a licence ?
(Key file: /opt/drweb/drweb32.key - Key file was not found! (No such file or directory)
A path to a valid license key file was not specified.)

 

[kadoudal]

Error: SysUser::update() failed: Unable to create system user: usermng: PAM password change failed: 24, Failed preliminary check by password service

same error upon psa restarted... any cache to clear ?

 

[IgorG]

Sorry, but I think that investigation directly on your server by support team can help with it.

 

[kadoudal]

further investigation

yet , we open a ticket ....

thanks Igor

 

[IgorG]

Could you please provide me ticket ID? I will monitor it

 

[IlgizarM]

I have problem "PAM password change failed: 24, Failed preliminary check by password service" on migration account from cPanel 11 to Plesk 10.0.1. My solve: manual run '/usr/local/psa/admin/plib/api-cli/domain.php --update DOMAIN -hosting true -hst_type phys -ip IPADDRESS -login LOGIN -passwd PASSHASH' on temporary directory (/usr/local/psa/PMM/var/20110118114300877). Untar file docroot_1101181145.tar on user`s home httpdocs and change owner/group.

 

[KingWeb]

you say to remove the extra packages? how exactly do you do that?

I do have extra packages:

[root@cl-240 ~]# rpm --qf "%{n}-%{version}-%{release}_%{arch}\n" -qa |grep pam
pam_smb-1.1.7-7.2.1_x86_64
pam-0.99.6.2-6.el5_4.1_x86_64
pam_ccreds-3-5_x86_64
pam_ccreds-3-5_i386
psa-spamassassin-10.10.1-cos5.build1010110120.18_x86_64
pam_passwdqc-1.0.2-1.2.2_x86_64
pam_passwdqc-1.0.2-1.2.2_i386
pam_krb5-2.2.14-15_x86_64
pam_krb5-2.2.14-15_i386
spamassassin-3.2.5-1.el5_x86_64
pam_smb-1.1.7-7.2.1_i386
pam-0.99.6.2-6.el5_4.1_i386
pam_pkcs11-0.5.3-23_i386
pam_pkcs11-0.5.3-23_x86_64
psa-libpam-plesk-10.10.1-cos5.build1010110120.18_x86_64

I mistakenly tried to install the 32 bit version of plesk instead of 64
and now I have successfully installed the 64 bit version but I am getting
errors when I try to add a domain or user

Apparently when I tried to install the 32 bit version, even though it failed,
it did manage to install unwanted pam packages which are now giving me the following error:

Error: system user update is failed: Unable to create system user: usermng: PAM password change failed: 24, Failed preliminary check by password service

Please tell me how to remove the unwanted 32 bit packages.
I have tried the command: yum remove
But it said package not found.

 

[KingWeb]

This is what I get when I try yum remove... I assume I must be doing this wrong?

[root@cl-240 ~]# yum remove pam_ccreds-3-5_i386
Loaded plugins: fastestmirror
Setting up Remove Process
No Match for argument: pam_ccreds-3-5_i386
Loading mirror speeds from cached hostfile
* addons: mirror.atlanticmetro.net
* base: mirror.anl.gov
* extras: mirror.trouble-free.net
* updates: hpc.arc.georgetown.edu
No Packages marked for removal

 

[IgorG]

Use "rpm -e package_name" instead yum.