archiva-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Zach Cox <zcox...@gmail.com>
Subject Re: AW: Archiva will not stop forcing password resets!
Date Mon, 09 Feb 2009 15:10:29 GMT

Thanks KUno, that looks promising.  I'm running the Archiva 1.1 standalone,
not through Tomcat.  Do you know where I should put that security.properties
file?

Thanks,
Zach


qnob wrote:
> 
> I did add
> 
> security.policy.password.expiration.days=999999
> security.policy.password.expiration.enabled=false
> 
> in D:\apps\apache-tomcat-6.0.18\conf\security.properties
> 
> worked well.
> 
> KUno
> 
> -----Urspr?ngliche Nachricht-----
> Von: Marc Lustig [mailto:ml@marclustig.com]
> Gesendet: Dienstag, 3. Februar 2009 17:12
> An: users@archiva.apache.org
> Betreff: Re: Archiva will not stop forcing password resets!
> 
> 
> 
> Have you checked out this:
> http://continuum.apache.org/docs/1.2.2/administrator_guides/security/customising-security.html
> ?
> (continuum has the same auth-system)
> 
> 
> Zach Cox wrote:
>>
>> We installed Archiva 1.1 last summer for internal project use.  When
>> creating every user in the system, we always uncheck the "Force User
>> to Change Password" checkbox in User Management, because it's
>> incredibly annoying and completely unnecessary for us.
>>
>> However, since we installed Archiva it has forced all of our users to
>> change their passwords several times.  During this latest round of
>> forced password changes, all of the users seem to get Locked even
>> after they successfully change the password.  Even if I sign in as
>> admin and unlock them, as soon as they try to sign-in again Archiva
>> immediately locks them and they cannot sign in.  I'm not sure how to
>> fix this other than to delete all of the users and re-create them
>> (which is just ridiculous - there has to be a better way).
>>
>> I've seen lots of messages on the mailing list about this force
>> password change/locked user problem, but no one ever seems to offer
>> any definitive answers or workarounds.
>>
>> Is there a way in Archiva 1.1 to COMPLETELY disable this forced
>> password changing?  Also, in Archiva 1.1 how can I ACTUALLY unlock
>> users so they can continue to use the system?
>>
>> Thanks,
>> Zach
>>
> 
> --
> View this message in context:
> http://www.nabble.com/Archiva-will-not-stop-forcing-password-resets%21-tp21792131p21813019.html
> Sent from the archiva-users mailing list archive at Nabble.com.
> 
> 
> 

-- 
View this message in context: http://www.nabble.com/Archiva-will-not-stop-forcing-password-resets%21-tp21792131p21914802.html
Sent from the archiva-users mailing list archive at Nabble.com.


Mime
View raw message