Password reset sends out a new password even if the operation fails
|Reported by:||Olemis Lang||Owned by:||Steffen Hoffmann|
|Severity:||major||Keywords:||Bloodhound password reset|
|Cc:||Olemis Lang, bloodhound-dev@…, Ryan J Ollos||Trac Release:||1.0|
Description (last modified by )
This bug has been reported by Bloodhound users:
In case where the system is misconfigured and password reset does not work as indicated by "AttributeError?: Cannot find an implementation of the "IPasswordHashMethod" interface named "HtDigestHashMethod?". Please update the option account-manager.hash_method in trac.ini" in UI an email with new nonworking password is sent out.
Please read original bug report for discussion there.
I've forwarded it to t-h.o because it seems not to be related to Bloodhound core plugins but AccountManagerPlugin . Nonetheless , if this is not the case please close this ticket as wontfix and leave us a note so that we can continue the discussion in there .