Opened 9 years ago

Last modified 9 years ago

#12278 closed defect

Reset password does not touch .htpasswd — at Initial Version

Reported by: massimo.b@… Owned by: Steffen Hoffmann
Priority: high Component: AccountManagerPlugin
Severity: normal Keywords: password reset, forgot password
Cc: Trac Release: 1.0

Description

This is trac-1.0.4.

Using "Reset password" does send a new password via Email, but never touches the trac.htpasswd. The new password doesn't work and the old password is still valid and password-reset enforcement is there after login.

However changing the htpasswd manually by the admin is the only work-around for users forgot their passwords:

htpasswd trac.htpasswd USER

I double-checked right now with the latest SVN version.

The logs have

INFO: Password reset for user: ...

and now errror.

AccountManager-Part of the config:

[account-manager]
htpasswd_file = /mnt/data/trac/projects/A/trac.htpasswd
htpasswd_hash_type = md5
login_attempt_max_count = 3
password_store = HtPasswdStore
persistent_sessions = true
reset_password = true
user_lock_time = 30

Change History (0)

Note: See TracTickets for help on using tickets.