id	summary	reporter	owner	description	type	status	priority	component	severity	resolution	keywords	cc	release
12278	Reset password does not touch .htpasswd	massimo.b@…	Steffen Hoffmann	"This is trac-1.0.4.

Using //Reset password// **does** send a new password via Email, but never touches the `trac.htpasswd`. The new password **doesn't** work, the old password is still valid and password-reset enforcement is there after login.

Changing the `htpasswd` file manually by the admin is the only work-around for users forgot their passwords:
{{{#!sh
htpasswd trac.htpasswd USER
}}}

I double-checked right now with the latest SVN version.

The logs have
{{{
INFO: Password reset for user: ...
}}}
and now error.

!AccountManager config:
{{{#!ini
[account-manager]
htpasswd_file = /mnt/data/trac/projects/A/trac.htpasswd
htpasswd_hash_type = md5
login_attempt_max_count = 3
password_store = HtPasswdStore
persistent_sessions = true
reset_password = true
user_lock_time = 30
}}}"	defect	new	high	AccountManagerPlugin	normal		password reset, forgot password		1.0