Possible bug in FTP accounts - ISPC probably not to blame

[manarak]

I have just setup some new sites (on the same client).

I have set the same password for 2 different FTP users for 2 different sites (let's say user FTP-A for site A and FTP-B for site B), but I gave both accounts the same password.

The funny thing is that logging in with user FTP-B led to site A.

After I changed the password of FTP-B, connection was properly made with site B.


So there seems to be a bug in the login process on the FTP server.
(I am using pure FTP from Falko's perfect server setup with Debian Lenny)

=> workaround: always give different FTP passwords for every single account.

=> possible todo for ISPC: make sure a password is not given out twice.

Now I remember that I was surprised that Plesk did not allow two accounts with identical passwords - this may be the cause.

[till]

FTP accounts are identifed by their username and not their password. I will have to verify this but I never heard of a problem like that.

[manarak]

for sure it is strange.

but I changed the password back and forth a few times and can definitely confirm the bug.

I had to loop through the accounts and change all passwords to rule out this thing from happening again.