On Wednesday, September 6, 2017 at 8:46:52 AM UTC-7, Nicolas MARTIN wrote: > > I've modified pwhash.py but I'm still faced the issue. > > Now I'm trying to analyse this in a different way, to see why the > procedure doesn't work now (changes in Trac or the server) or if the > problem dates back to the authentication switch. In particular, I found > that most of the 'password_reset' entries for newly accounts are still in > the 'session_attribute' SQL datatable. Would they not have been removed > after the first connection with the personalized password ? >
As noted, there are several issues with password reset. I doubt it works properly in all circumstances. I will try to take a look in the next few days. > The situation is a bit critical because I still can create an account but > for me I have no more a secure way to transmit the access. Any hint ? > I don't understand the last statement. - Ryan -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/trac-users. For more options, visit https://groups.google.com/d/optout.
