id,summary,reporter,owner,description,type,status,priority,component,severity,resolution,keywords,cc,release
12278,Reset password does not touch .htpasswd,massimo.b@…,Steffen Hoffmann,"This is trac-1.0.4.

Using //Reset password// **does** send a new password via Email, but never touches the `trac.htpasswd`. The new password **doesn't** work, the old password is still valid and password-reset enforcement is there after login.

Changing the `htpasswd` file manually by the admin is the only work-around for users forgot their passwords:
{{{#!sh
htpasswd trac.htpasswd USER
}}}

I double-checked right now with the latest SVN version.

The logs have
{{{
INFO: Password reset for user: ...
}}}
and now error.

!AccountManager config:
{{{#!ini
[account-manager]
htpasswd_file = /mnt/data/trac/projects/A/trac.htpasswd
htpasswd_hash_type = md5
login_attempt_max_count = 3
password_store = HtPasswdStore
persistent_sessions = true
reset_password = true
user_lock_time = 30
}}}",defect,new,high,AccountManagerPlugin,normal,,"password reset, forgot password",,1.0