How to force password change

Post

Posted
Rating:
#5984 (In Topic #1239)
If an Administrator feels that an account may have been compromised (or otherwise feels the need to force a password change), how can the Admin set the "Force password change" ON so that the next time the account owner logs in they are requested to change their password?

I expected to find this option available under Profile->Edit but for some reason I am not finding it.

Any help you can offer would be greatly appreciated.  Thanks!
 

Post

Posted
Rating:
#5987
We don't have an explicit feature for that.

I just put a note about it in this tracker issue 0002700: Force reset all member passwords feature - Composr CMS feature tracker

I can think of a couple of workarounds. One would be to change the user's password, then in Commandr do this:

Code

echo temporary > /database/f_members/2/m_password_compat_scheme

Where 2 is the member ID of the member.

Or, you could change the password to something gibberish, and e-mail the user they should do a password reset to get back in.

Post

Posted
Rating:
#5989

Chris Graham said

We don't have an explicit feature for that.

I just put a note about it in this tracker issue 0002700: Force reset all member passwords feature - Composr CMS feature tracker

I can think of a couple of workarounds. One would be to change the user's password, then in Commandr do this:

Code

echo temporary > /database/f_members/2/m_password_compat_scheme

Where 2 is the member ID of the member.

Or, you could change the password to something gibberish, and e-mail the user they should do a password reset to get back in.

Okay, thanks Chris.  This request doesn't have to necessarily be to force every account to reset their password.  I'd like to see this available on an individual account basis.  In my case, we have three officers on the board of the Homeowners Association and at the end of their term, I would like to simply set those three accounts to "Force password change" so that as the new officers join (as they will assume those accounts and the roles they support), the first time they log in they will be prompted to set a new password (thus securing the account for their use).

In the meantime, option 2 will work for me :)  Thanks!
1 guest and 0 members have recently viewed this.