WHMCS and cPanel password problems

[MarshallEvans]

I have run into this oddity:

 

In WHMCS, on the Products/Services page for a client, often the Password field is blank for their hosting service.

 

If I try to add the correct password, WHMCS return with

"Module Command Error failed: missing arguments: new_password"

 

A look in the module debug log show that it tried to reset the password without including it:

e.g. /xml-api/passwd?user=someUser&pass=<NOTHING>

 

If I have used the "Create" module function, the password is there, but if I attempt to change it in this case, the module will ignore whatever is typed in the box and instead report "success" - even though in fact it has just reset the password to the original one showing.

 

In other words it is again ignoring the entry in the box.

 

Another side effect is, if you are trying to include the control panel (cPanel) password (using $service_password ) in an email to the client, it will use whatever shows in the WHMCS box - which will be either blank for those people whose passwords do not show in WHMCS or the supposedly correct that does show.

 

Also, if the password is changed directly in cPanel/WHM - this password does not show up in WHMCS and it is not able to be used in notification emails either.

 

Has anyone seen this behaviour before? Any ideas on how to fix?

 

Additional info though: both WHMCS and cPanel are up to date

versions Version: WHMCS v5.2.4 and cPanel/WHM v11.36.1

 

In the rendered version of the clientsservices.php page the "Change Password" button executes runModuleCommand('changepw') onClick

The only variable on the page that looks password-like is the "password" form field

 

Like I said though this variable is either not being passed to the command interpreter runModuleCommand('changepw') or it is being ignored by same.

 

The module debug log shows a simple request:

/xml-api/passwd?user=SomeUser&pass=SomePassword

 

But the password in this request is not coming from the clientsservices.php page - as far as I can tell

 

passwords for hosting accounts seem to be stored in the WHMCS.hosting table as hashes ... maybe WHMCS has a problem decrypting these if it has not created them? Does it use a different library than cPanel?

 

BTW: both systems WHMCS and cPanel are running on the same physical server

 

 

Any help would be much appreciated

[robb3369]

Try setting the password and first clicking the save button, and after the page refreshes, click the change password button.