Question & Answer > View Question

Potential Bug: Security Enhanced Manager (forced password change)

Confluence User - 31 May, 2017

Hi guys,

I am using the enhanced security directory manager.

In v6 beta 2 new users are still required to change their password - even though I deactivated this in the settings. I thought it is a bug - however, I add users through a series of sql statements and may be missing a db field controlling this?

Cheers,

Eric

security;user;login

2

Confluence User •

31 May, 2017 •

confluenceUser •

•

confluenceUser •

Hi, I think it depends on how you added the passwords in your SQL. If you added MD5 passwords, then when using the Security Enhanced Directory Manager it will prompt a change of password because it's using a stronger encryption according to Improved Password Storage.

Confluence User •

01 Jun, 2017 •

confluenceUser •

•

confluenceUser •

Thanks - I adapted a Joget example app - so it might only be md5. Maybe sending out one time passwords for the initial registration is better anyway since it means they have to have access to that email address.

1

CSV | Excel | XML | PDF

Your answer

Print

Potential Bug: Security Enhanced Manager (forced password change)

2

RELATED QUESTIONS

Your answer

To answer a question you'll need an account.

2.builder-style-e6171af5-4c89-4b4e-8246-baffc1ad9f7d{color:#008C60 !important;}

RELATED QUESTIONS

Your answer.builder-style-53772738-9996-476d-bdbd-7c7481f1106e{color:#008C60 !important; margin-left:10px !important;}

To answer a question you'll need an account.

2

Your answer