You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@continuum.apache.org by "Luciano Resende (JIRA)" <ji...@codehaus.org> on 2008/05/15 05:23:27 UTC

[jira] Created: (CONTINUUM-1771) When changing password

When changing password 
-----------------------

                 Key: CONTINUUM-1771
                 URL: http://jira.codehaus.org/browse/CONTINUUM-1771
             Project: Continuum
          Issue Type: Bug
          Components: Web - Security
    Affects Versions: 1.1
            Reporter: Luciano Resende


When your password is expired or to expire, continuum redirect you to the change password page
Enter your current password (e.g pass9) , then enter the new password as one that you have used before (e.g pass1)
Continuum display a message saying that you can't reuse a password you have already used, but it DOES change the password 
If you want to change the password to something else, you would need to use current password as the password that was considered invalid (e.g pass1)

This is reproducible in the Apache continuum environment (vmbuild.apache.org)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Closed: (CONTINUUM-1771) When changing password

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/CONTINUUM-1771?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brett Porter closed CONTINUUM-1771.
-----------------------------------

      Assignee: Brett Porter
    Resolution: Cannot Reproduce

I believe this was fixed some time ago - tested in 767397

> When changing password 
> -----------------------
>
>                 Key: CONTINUUM-1771
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1771
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - Security
>    Affects Versions: 1.1
>            Reporter: Luciano Resende
>            Assignee: Brett Porter
>
> When your password is expired or to expire, continuum redirect you to the change password page
> Enter your current password (e.g pass9) , then enter the new password as one that you have used before (e.g pass1)
> Continuum display a message saying that you can't reuse a password you have already used, but it DOES change the password 
> If you want to change the password to something else, you would need to use current password as the password that was considered invalid (e.g pass1)
> This is reproducible in the Apache continuum environment (vmbuild.apache.org)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Updated: (CONTINUUM-1771) When changing password

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/CONTINUUM-1771?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brett Porter updated CONTINUUM-1771:
------------------------------------

    Fix Version/s: 1.3

> When changing password 
> -----------------------
>
>                 Key: CONTINUUM-1771
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1771
>             Project: Continuum
>          Issue Type: Bug
>          Components: Web - Security
>    Affects Versions: 1.1
>            Reporter: Luciano Resende
>             Fix For: 1.3
>
>
> When your password is expired or to expire, continuum redirect you to the change password page
> Enter your current password (e.g pass9) , then enter the new password as one that you have used before (e.g pass1)
> Continuum display a message saying that you can't reuse a password you have already used, but it DOES change the password 
> If you want to change the password to something else, you would need to use current password as the password that was considered invalid (e.g pass1)
> This is reproducible in the Apache continuum environment (vmbuild.apache.org)

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira