Details
-
Bug
-
Resolution: Obsolete
-
Medium
-
None
-
2.1.1
-
Reproduced on Chrome, IE and Firefox, latest releases
Crowd is running with OpenDS as backend.
-
1
-
Severity 2 - Major
-
12
-
Description
- User enters http://server/openidserver/
- User selects "Can't access your account?"
- User selects "I have forgotten my password"
- User enters username
- User gets email with activation url and clicks it
- User user changes password and is presented with a login screen
- User tries to login with the new password on that screen but this fails.
- If the user goes back to http://server/openidserver/ the user can login with the new password
- if the user goes to another Crowd-integrated app like confluence, the new password works there as well.
The login prompt shown when the system fails is not the same login prompt as shown at the first page (http://server/openidserver/)