Steps to reproduce the behaviour:

1. Enable External password or User management
2. Navigate to 'Can't access your account?' page http://<host_name>/secure/ForgotLoginDetails.jspa
   The following message is displayed:
   
   which implies that user will be able to reset their password.
3. Provide required details and JIRA will confirm that password got reset
   
4. The confirmation email sent to the user's mailbox will re-ensure them about the reset.
   

This application behaviour is confusing for users who are not aware of the back-end system configuration and will expect the password to get reset.