Opened 9 years ago
Last modified 9 years ago
#12278 closed defect
Reset password does not touch .htpasswd — at Initial Version
Reported by: | Owned by: | Steffen Hoffmann | |
---|---|---|---|
Priority: | high | Component: | AccountManagerPlugin |
Severity: | normal | Keywords: | password reset, forgot password |
Cc: | Trac Release: | 1.0 |
Description
This is trac-1.0.4.
Using "Reset password" does send a new password via Email, but never touches the trac.htpasswd. The new password doesn't work and the old password is still valid and password-reset enforcement is there after login.
However changing the htpasswd manually by the admin is the only work-around for users forgot their passwords:
htpasswd trac.htpasswd USER
I double-checked right now with the latest SVN version.
The logs have
INFO: Password reset for user: ...
and now errror.
AccountManager-Part of the config:
[account-manager] htpasswd_file = /mnt/data/trac/projects/A/trac.htpasswd htpasswd_hash_type = md5 login_attempt_max_count = 3 password_store = HtPasswdStore persistent_sessions = true reset_password = true user_lock_time = 30
Note: See
TracTickets for help on using
tickets.