Comments & Questions about ChangePassword

So far as I can tell, this applies only if you are using something like twiki basic authentication, using a htpassword file managed by twiki. It does not apply if you are using external authentication, such as an IT managed password system.

See CompanyAndTWikiWebAuthentication

It's still a good idea to change your password regularly; you just may not be able to do it from within TWiki. Or at least from within the default set of TWiki tools.

(I find this sort of thing that applies to some but not all twiki configurations, without an indication of what configurations it applies to, very confusing.)

-- AndyGlew - 03 Apr 2003

Thanks for the heads-up, added a note for admin.

-- PeterThoeny - 15 Apr 2003

There seems to be a big problem: if you log into TWikiGuest you can change the guest password. If you do so noone with normal permissions can recover it nor he can login to the guest accont. Maybe I am missing something... the solution would be to set

 
      * Set DENYTOPICVIEW = Main.TWikiGuest

-- VincenzoDiMassa - 28 Jan 2005

Correct, that can be an issue, although one that can be fixed easily by the administrator. A proper fix is to DenyPasswordChangeForTWikiGuest

-- PeterThoeny - 28 Jan 2005

What if you forgot your password? There is no way to get it back, or reset it, either from a user's perspective or from the Administrator. How can that be?

-- WardSmith - 23 Mar 2005

And how exactly do you get you .htpasswd managed by Twiki? I am really sick and tired of reading through documentation like this and getting NO HINT whatsoever. Please hint, please? Is there some simple howto?

-- HenningVogt - 21 Oct 2005

Thank you for using the open source TWiki. Please follow the TWikiInstallationGuide, "Enabling Authentication of Users", which has step-by-step instructions on how to get .htpasswd used. Please ask support questions in the Support web.

-- PeterThoeny - 21 Oct 2005

Ok for everyone needing held by the hand really tightly:

• Your .htpasswd is managed by Twiki, if you use TWikiRegistrationPub
• if you use TWikiRegistration the passwordchanging is not possible from Twiki.

oh, and by the way, if you have your errormessage poiting in the wrong direction: edit templates/oopsnotwikiuser.tmpl to contain TWikiRegistrationPub instead of TWikiRegistration. (the errormessage beeing at passwordchange: "You are not registered", although you are...)

-- HenningVogt - 21 Oct 2005

No, you do not need to change the templates. Please follow the TWikiInstallationGuide: Rename TWikiRegistration to TWikiRegistrationPub.

-- PeterThoeny - 21 Oct 2005

You might want to install DevelopBranch DakarRelease Beta 3. It changes all of this stuff and will go live as soon as we get enough feedback to be sure we've eliminated all the bugs.

-- MartinCleaver - 21 Oct 2005

I'm a little miffed by your registering system. I filled out the form and the email box was properly filled in. I "OK'd" the reg and the confirmation screen came up with my email adr changed by the bold letter addition of .....@netzeroSTOPSPAMPLEASENOSPAM.com. Meaning I'll never get the email. I attempted to change it back but there is no option listed to do this that I can yet find. My true email is jopower@netzeroPLEASENOSPAM.com and I would appreciate a note sent there as to how this will be repaired.

-- JoHutchinson - 04 Mar 2006

This STOPSPAM thing is reeeeeeallly annoying!!!

-- JoHutchinson - 04 Mar 2006

This is no bug Jo, this is a feature. You should have got a confirmation email anyway, cause STOPSPAM is only entered in view mode to prevent dumb email harvesters from collecting email addresses from public Wiki sites.

-- FranzJosefSilli - 04 Mar 2006

Actually, outgoing e-mail is currently not working on twiki.org. This has nothing to do with the STOPSPAM spam padding.

-- PeterThoeny - 04 Mar 2006