This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 176170 - Not asked to change newly assigned password
Summary: Not asked to change newly assigned password
Status: RESOLVED FIXED
Alias: None
Product: www
Classification: Unclassified
Component: Admin (show other bugs)
Version: 6.x
Hardware: PC Mac OS X
: P2 normal (vote)
Assignee: Marco Walther
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-11-09 02:22 UTC by ritzmann
Modified: 2011-11-17 01:40 UTC (History)
1 user (show)

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description ritzmann 2009-11-09 02:22:53 UTC
I received the email with my new account credentials, clicked on the link in the email <https://netbeans.org/bugzilla/enter_bug.cgi?product=www&component=Admin>, then logged in with my username and new password.

While the email states "You will be asked to change your password when you login for the first time", I was not asked for a new password.
Comment 1 Petr Blaha 2009-11-09 06:56:13 UTC
You should be able to change your password in Edit profile, see http://netbeans.org/projects/help/pages/ProfileSettings#Password_Tab

If you are able to change the password, please close this issue.
Comment 2 ritzmann 2009-11-09 07:07:13 UTC
This issue is not about whether I am able to change my password. It is that I am not required to change my password even though your email states otherwise. That is actually a security issue because the initial password was sent out over an insecure medium.
Comment 3 mvanek 2009-11-09 08:35:49 UTC
Thanks ritzmann, it looks some users are not adviced to change their password after first login. I have 3 testing accounts and for all of them I was advised to change password. Would you be so kind and try to regenerate new password by clicking forgot password in log in page? If you are not advised to change new regenerated password, please let us know. Otherwise I would also prefer close this issue.
thanks,
Michal
Comment 4 artibee 2009-11-09 08:46:11 UTC
This is the scenario on how I was NOT asked for a password:

Since I knew that I'd be asked to log in for bug submission,
I clicked "submit a bug", and was taken to this page:

https://netbeans.org/bugzilla/index.cgi?GoAheadAndLogIn=1

After I entered username and new account (temporary) password,
it took me to this page without asking to change my password:

https://netbeans.org/bugzilla/enter_bug.cgi

So I logged out, then I looked around for a while and
found the Login link which took me to this page:

https://netbeans.org/people/login

Once I entered my username and temporary password, then
I was prompted to reset my password.

Hope this is helpful/Mary
Comment 5 artibee 2009-11-09 08:52:57 UTC
Just to be completely accurate, I clicked on the
"Enter a new issue" link on this page:

http://netbeans.org/community/issues.html

There are other ways to get to this bugzilla login page,
such as the "Log in" link at the top of any bugzilla
show_bug.cgi page.
Comment 6 Jesse Glick 2009-11-09 11:18:30 UTC
I was also not forced to change my new temporary password either (though I have done so at my own initiative).
Comment 7 Vince Kraemer 2011-07-12 16:24:50 UTC
Since Lea doesn't work for Oracle or on Kenai anymore, we might want to reassign this to an actual person that can and might do something to resolve the problem...

I do not know who that person would be...  If I did, these issues would be assigned to them when I committed this comment.
Comment 8 Marian Mirilovic 2011-11-16 10:00:59 UTC
reassign to default owner ...

marco, I think this is still valid issue ... feel free to close if not, thanks in advance.
Comment 9 Marco Walther 2011-11-17 01:40:51 UTC
BZ now forwards all login's to /people/login which in turn asks the user to change the password.

So that should be fixed.