Opened 11 years ago

Last modified 11 years ago

#10406 closed defect

Password reset sends out a new password even if the operation fails — at Version 2

Reported by: Olemis Lang Owned by: Steffen Hoffmann
Priority: normal Component: AccountManagerPlugin
Severity: major Keywords: Bloodhound password reset
Cc: Olemis Lang, bloodhound-dev@…, Ryan J Ollos Trac Release: 1.0

Description (last modified by Steffen Hoffmann)

This bug has been reported by Bloodhound users:

In case where the system is misconfigured and password reset does not work as indicated by "AttributeError?: Cannot find an implementation of the "IPasswordHashMethod" interface named "HtDigestHashMethod?". Please update the option account-manager.hash_method in trac.ini" in UI an email with new nonworking password is sent out.

Please read original bug report for discussion there.

I've forwarded it to t-h.o because it seems not to be related to Bloodhound core plugins but AccountManagerPlugin . Nonetheless , if this is not the case please close this ticket as wontfix and leave us a note so that we can continue the discussion in there .

Change History (2)

comment:1 Changed 11 years ago by anonymous

Cc: bloodhound-dev@… added

comment:2 Changed 11 years ago by Steffen Hoffmann

Description: modified (diff)

Thanks for forwarding this. It is certainly a plugin issue. I included the original report (small) for completeness. If you really expect a solution here, do not require everyone to open another ticket.

Claiming issues on misconfiguration is a rather weak argument. Nevertheless I'll have a closer look at it. But last time I checked it, Bloodhound still pulled acct_mgr-0.3.2 from this repository. Because 0.4 release is near, it would be sensible to already use 0.4dev now. I has a lot of issues fixed, that will never be back-ported to the current stable version.

Note: See TracTickets for help on using tickets.