Ticket #16866 (assigned)
login does not accept all passwords set at reset
| Reported by: | ciuly | Owned by: | ctsai |
|---|---|---|---|
| Keywords: | ENGR NF-2012 | Cc: | |
| Private: | no |
Description
I reset my password as a result of the email I received to a strong one: 32 characters generated using keypass containing:
- uppercase
- lowercase
- digits
- minus
- underline
- special
- brackets
The password reset form accepted that just fine. However when trying to login, it didn't allow.
I ended up generating a 16 character long password that did not contain minus and that worked. I'm not sure if the first one did or did not contain the minus, but the password generator profile has that checked.
In my opinion, the password reset should accept at least as much as the login form and definitely not more.