Possible bug in FTP accounts - ISPC probably not to blame

Discussion in 'General' started by manarak, Jun 11, 2009.

  1. manarak

    manarak Member

    I have just setup some new sites (on the same client).

    I have set the same password for 2 different FTP users for 2 different sites (let's say user FTP-A for site A and FTP-B for site B), but I gave both accounts the same password.

    The funny thing is that logging in with user FTP-B led to site A.

    After I changed the password of FTP-B, connection was properly made with site B.

    So there seems to be a bug in the login process on the FTP server.
    (I am using pure FTP from Falko's perfect server setup with Debian Lenny)

    => workaround: always give different FTP passwords for every single account.

    => possible todo for ISPC: make sure a password is not given out twice.

    Now I remember that I was surprised that Plesk did not allow two accounts with identical passwords - this may be the cause.
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    FTP accounts are identifed by their username and not their password. I will have to verify this but I never heard of a problem like that.
  3. manarak

    manarak Member

    for sure it is strange.

    but I changed the password back and forth a few times and can definitely confirm the bug.

    I had to loop through the accounts and change all passwords to rule out this thing from happening again.

Share This Page