Search Engine: Elastic
  • Article for your preferred language does not exist. Below is international version of the article.

Article ID: 117281, created on Sep 16, 2013, last review on May 18, 2017

  • Applies to:
  • Odin Business Automation Standard 4.5

Symptoms

This is about Plesk version 11.0.9 or higher registered in Odin Business Automation Standard (OBAS) version 4.3 or higher.

Plesk orders fail with following error (Top > Configuration Director > Logging and Errors > Action Log):

Your password is not complex enough. According to the server policy, the minimal password strength is Strong. To improve the password strength, use numbers, upper and lower-case characters, and special characters like !,@,#,$,%,^,&,*,?,_,~

Cause

"Minimum password strength" is set to "Strong" or "Very Strong" in Plesk (Plesk > Tools & Settings > Security Policy):

1. "Minimum password strength" is "Strong"

a) weak Plesk passwords are stored in OBAS database. It's by design that Plesk passwords are not stored in OBAS database since version 4.3 and Plesk 10.0. This misconfiguration might appear after incorrect upgrading of Plesk from version 8.x or 9.x within OBAS.

Also it may be caused by the internal software issue with ID #PBAS-29513, that was fixed in OBAS 4.5.3.

b) weak passwords of domains FTP users in Plesk. It's by design that during order processing OBAS receives the weak password from Plesk (it's not stored in OBAS) and sends it back. The following errors are shown in OBAS log:

<packet version="1.6.3.5"><webspace>
<set>
<filter><id>586</id>
</filter>
<values>
<gen_setup><status>0</status>
<owner-id>450</owner-id>
<name>%domain.tld%</name>
<ip_address>123.123.123.123</ip_address>
...
</limits>
<hosting><vrt_hst>
<property><name>ftp_login</name><value>%ftp_user%</value></property>
<property><name>ftp_password</name><value>%weak_ftp_password%</value></property>         

<?xml version="1.0" encoding="UTF-8"?>
<packet version="1.6.3.5"><webspace><set><result><status>error</status><errcode>2204</errcode><errtext>System user initing was failed. Error: Your password is not complex enough. According to the server policy, the minimal password strength is Strong. To improve the password strength, use numbers, upper and lower-case characters, and special characters like !,@,#,$,%,^,&,*,?,_,~</errtext><filter-id>586</filter-id><id>586</id></result></set></webspace></packet>

2. "Minimum password strength" is "Very Strong"

It's impossible to set new password for Plesk from OBAS version less than 4.5.2. Such behavior is considered to be a software issue #PBAS-29314 that was fixed in OBAS 4.5.2

Resolution

1. "Minimum password strength" is "Strong"

a) There are two ways to resolve the error:

  • Log in to the Plesk node (where the domain in question resides) and change minimum password strength to "Very weak" (Plesk > Tools & Settings > Security Policy).

  • If OBAS version < 4.3 and Plesk version < 10 or Plesk has been just upgraded from old versions (<10) then it is required to reset Plesk password directly in OBAS database. Since the issue requires complex manipulations with the database, it is recommended to contact Odin Technical Support for assistance.

    The OBAS orders will process after the changes.

  • If OBAS version > 4.3, please upgrade it to the latest version.

b) Update domains FTP passwords in Plesk in one of the following ways:

  • Customer may update the domain’s FTP password in CP through Websites & Domains > FTP Access > %ftp_user% > Password

  • Provider may update domain's FTP password in Plesk admin panel (Top > Service Director > Plesk Manager > Nodes > %plesk_node% > General Settings > Log in to Parallels Plesk Control Panel) at Subscriptions > %domain.tld% > Manage Hosting > Websites & Domains > FTP Access > %ftp_user% > Password

  • Plesk admin may update domain's FTP password in command line. Run the following command on Plesk node to see current password of FTP user on domain %domain.tld%:

    [root@plesk_node ~]# mysql -uadmin -p`cat /etc/psa/.psa.shadow` psa -e"select d.name as domain, su.login as 'FTP login', a.type as 'FTP password type', a.password as 'FTP password' from domains d, sys_users su, accounts a, hosting h where d.id=h.dom_id and h.sys_user_id=su.id and su.account_id=a.id and d.name='%domain.tld%'"`
    

    Run this command on Plesk node to update the password:

    [root@plesk_node ~]# /usr/local/psa/bin/domain --update %domain.tld% -passwd %strong_password%
    
  • Plesk admin may update FTP passwords for all domains using the Plesk Mass Password Reset Script.

2. If Minimum password strength should be Very Strong

Upgrade OBAS to the latest version.

400e18f6ede9f8be5575a475d2d6b0a6 caea8340e2d186a540518d08602aa065 70a5401e8b9354cd1d64d0346f2c4a3e 624ca542e40215e6f1d39170d8e7ec75

Email subscription for changes to this article
Save as PDF