Hi,

My new Plesk 5.0 box accepts login with username and password only. But I have to change so that it should only accepts usernames as username@domainname.com format. Because I doing name based hosting...

Ex:

E-mail: info@domain1.com
Password: info1

E-mail: info@domain2.com
Password: info2

When cheking e-mail it accepts the username as 'info'. So if you write the password as info1, you are checking domain1's e-mail, and if you write password as info2, you are checking domain2's e-mail.

How to fix it? It should only accepts usernames as full format, username@domain.com..

Please HELP!

Thanks

I don't think that would work on a plesk box. And there is no need...namebased hosting works just fine with just the username as the login. The way plesk is setup, it avoids any confusion from that.

Let's suppose that:

E-mail: info@domain1.com
Username: info
Password: info123

E-mail: info@domain2.com
Username: info
Password: info123

Same username and same password. What to do?

And, this should be a big securty problem, because, you can
webmail.anydomain.com then try any password, if there are 500 domains, then you may catch one of them! But in the other case, you should catch both the domain and password....

Plesk wouldn't allow it. That is why that is not an issue.

but if you are just talking for the webmail login...there is a hack somewhere on the forum at plesk.com that allows you to change the way the logins work there.

plesk allowed it.

I tried, now... Set my outlook as,

SMTP: domain2.com
POP3: domain2.com

and write username as 'info'
and write password as domain1's password...

Then it gets all the mails under info@domain1.com (

So, I can try and catch one of the 500 domains, e-mail password!

Any idea?

yes...that is waht I am saying... info@domain1.com can't get info@domain2.com's email..no matter what mail servers he/she sets. All the mailservers resolve to the same ip#...so that doesn't matter...you can use the ip# instead of the domain name for that matter. Sure, you can try and guess another domain names password...but that won't be any different then typing in user@thierdomain.com and trying to guess thier password.

What I was saying plesk won't allow is for 2 email users with the same username to have the same password. Which is the only way that someone would accidently get someone else's email.


It is just like ftp..the combination of username and password tells the server where to put you when you ftp in..same with the email..the combo of username/password tells the server which mailbox you are.

Trying passwords for username and username@domain.com is quite different.

In the first one, you may try the username 'info' with the password 'inf123' for example. Then if one of the 500 domain's password is 'inf123', you can get it! 1 trying for 500 domains is enough!

In the second case, you will trying only for a specific domainname.
You should guess the info@specificdomain.com and the password, both at the same time.
1 trying for 1 domain.

So, they are different, right?

And you are right Plesk does not allow to the same username and password combination.