Lists all users with duplicate password (and their password) - Tested with up to Plesk 11.5

dupefinder.sh

#!/bin/sh
#Lists all users that share a password with other users. Sorted by the duplicate passwords. This could probably be optimized in a hundred different ways, but it works.


#Grab our list of duplicate passwords
mysql psa -BNse "select password from mail left join domains on mail.dom_id = domains.id inner join accounts where mail.account_id = accounts.id and postbox = 'true' group by password having COUNT(*) > 1" | while read -r line
do
  echo "====="
  echo "Users with password $line"
  echo "====="
#Output a list in the format of user@domain, where the users share the same password.
  mysql psa -BNse "select concat(mail_name,'@',name) from mail left join domains on mail.dom_id = domains.id inner join accounts where mail.account_id = accounts.id and postbox = 'true' and password = '$line' "
  echo ""
done