• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

password strength setting not working

M

Matilda

Guest
Hi Guys,

Wondering if anyone has had any similar issue. We recently upgrade from 9x to 10x, have done all the updates, checked mysql for any corrupted tables, everything looks sweet.

In my main mail settings section, I have very weak password as the minimum but when I try add a new email account to a particular domain and use the password 'lnldjflk0sa' which shows as 'weak' it fails with the following error :

Unable to update the mail account properties: The password was rejected: it is not strong enough according to server security policy. Improve password strength by using numbers, upper and lower-case characters, and special characters like !,@,#,$ and so on

Randomly though, im not sure how or why it will accept the password, then thinking it is ok, I go into the second mailbox, paste the same password but it fails and i get the above message again.

Ive gone into the mail settings page again, set it high, apply, then set it to weak, apply, very weak, apply, it doesn't seem to matter. If I then use something like 'password123' which shows as medium it will accept it and works fine, even though the mail settings min password strength is set to very weak so 'lnldjflk0sa' should work all the same.

Im not sure if its a bug or something thats just not right in a setting somewhere. Has anyone experienced the same thing? is it possible just to disable the password strength checking altogether? Is there a field in a table in the database I can check to make sure it is actually set to very weak and not locked on medium?

any help appreciated.

Nathan.
 
I have the same problem .. did you find a fix for this?

It is sooo very annoying I really do not like this new panel.
 
Same problem here, any fix?
getting:
The password was rejected: it is not strong enough according to server security policy.

Used password: 24011634-KD13-1303

About 9 of 10 mailboxes with this password do work, I have no idea why...
Did you solve this?

Altec
 
Thanks, but I wont update Plesk at the moment, don't want to mess up my running system ;)

Nevertheless I did a workaround:
The problem was, that the username was part of that password (40@domain.tld).....
So I changed my script a little bit. (USERNAME = 40)
/mail -c XYZ_USERNAME_ZUX_@domain.tld -passwd 24011634-KD13-1303
/mail --rename XYZ_USERNAME_ZUX_@domain.tld -new USERNAME
First line creates a mail user XYZ_USERNAME_ZUX_@domain.tld, with the password I wanted to use.
Second line renames the created user from XYZ_USERNAME_ZUX_ to USERNAME.
While renaming, plesk seems not to check the password again, so, I got the username with the 'unsafe' password!

As i said, just a workaround ;)

Altec
 
Back
Top