fineract-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sendoro Juma (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (FINERACT-296) Not able to reset new password after the existing password expires
Date Mon, 12 Dec 2016 07:19:58 GMT

    [ https://issues.apache.org/jira/browse/FINERACT-296?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15741198#comment-15741198
] 

Sendoro Juma commented on FINERACT-296:
---------------------------------------

Dear Colleagues, Dear Santosh,

I doubt if this is a bug!!!

I would recommend if password not changed within 
"force-password-reset-days" account should be locked/disabled... until 
administrator unlock/enable it or apply another 
"force-password-reset-days"

Else, if it is left open... we are creating loop for insecurity in 
accessibility of the system...


Regards
Sendoro





> Not able to reset new password after the existing password expires
> ------------------------------------------------------------------
>
>                 Key: FINERACT-296
>                 URL: https://issues.apache.org/jira/browse/FINERACT-296
>             Project: Apache Fineract
>          Issue Type: Bug
>          Components: User Management
>            Reporter: Santosh Math
>            Assignee: Markus Geiss
>            Priority: Minor
>
> Reported by Subramanya at https://mifosforge.jira.com/browse/MIFOSX-1863
> Original Description:
> 1. Create a user with valid userid and password.
> 2. Click on Admin -> System -> Configuration -> force-password-reset-days as
enabled and days as 1.
> 3. After 2 days try to login with the same above uer 
> Error message displayes as "
> Your password is expired, please reset your password" -> In same page enter new password
and repeat password field and click on Reset password button. 
> Not able to update the new password



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message