How to force password change

Post

Posted
Rating:
#6681 (In Topic #1730)
Avatar
Standard member
cwdean is in the usergroup ‘Fan in action’
If an Administrator feels that an account may have been compromised (or otherwise feels the need to force a password change), how can the Admin set the "Force password change" ON so that the next time the account owner logs in they are requested to change their password?

I expected to find this option available under Profile->Edit but for some reason I am not finding it.

Any help you can offer would be greatly appreciated.  Thanks!
 
Online now: No Back to the top

Post

Posted
Rating:
#6684
Avatar
Site director
Chris Graham is in the usergroup ‘Administrators’
We don't have an explicit feature for that.

I just put a note about it in this tracker issue 0002700: Force reset all member passwords feature - Composr CMS feature tracker

I can think of a couple of workarounds. One would be to change the user's password, then in Commandr do this:

Code

echo temporary > /database/f_members/2/m_password_compat_scheme

Where 2 is the member ID of the member.

Or, you could change the password to something gibberish, and e-mail the user they should do a password reset to get back in.


Become a fan of Composr on Facebook or add me as a friend. Add me on on Twitter. Follow me on Minds (where I am most active). Support me on Patreon

Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Online now: No Back to the top

Post

Posted
Rating:
#6686
Avatar
Standard member
cwdean is in the usergroup ‘Fan in action’

Chris Graham said

We don't have an explicit feature for that.

I just put a note about it in this tracker issue 0002700: Force reset all member passwords feature - Composr CMS feature tracker

I can think of a couple of workarounds. One would be to change the user's password, then in Commandr do this:

Code

echo temporary > /database/f_members/2/m_password_compat_scheme

Where 2 is the member ID of the member.

Or, you could change the password to something gibberish, and e-mail the user they should do a password reset to get back in.

Okay, thanks Chris.  This request doesn't have to necessarily be to force every account to reset their password.  I'd like to see this available on an individual account basis.  In my case, we have three officers on the board of the Homeowners Association and at the end of their term, I would like to simply set those three accounts to "Force password change" so that as the new officers join (as they will assume those accounts and the roles they support), the first time they log in they will be prompted to set a new password (thus securing the account for their use).

In the meantime, option 2 will work for me :)  Thanks!
Online now: No Back to the top
1 guest and 0 members have just viewed this.

Statistics

Users online:

Paul D, Manu, MVLipwig, amit.nigam, Philip, deepu_ms, babu

Forum statistics:
  • 1,347 topics, 5,900 posts, 7,213 members
  • Our newest member is photocolorist
Birthdays:
Back to Top