reset password not working , taking old password (user_ table notupdated)

[venkata subrahmanyam adapa, modificado 14 Anos atrás.]

Hi,
We are using Tomcat 5.5 liferay portal 4.2.1. When we change some users password by admin and selected Reset Requied it is taking the new password giving by admin.
When the user logged in with password provided by admin it is prompting for reset required. So the user changes the password and worked for some hours. Once logout from the liferay and login after some time the new password is not working.
If the user tries to login with old password provided by admin then it works.

We found that when user tried to reset user_ table is not updated but passwordtracker has inserted new record.

The above behaviour happens rarely out of 30 users 2,3 users only facing such problems. For most of the users it is working fine.
Find the portal.properties attached.
auth.pipeline.pre=com.liferay.portal.security.auth.LDAPAuth
auth.pipeline.enable.liferay.check=true
uth.impl.ldap.enabled=false
auth.impl.ldap.required=false
auth.impl.ldap.factory.initial=${ldap.import.factory.initial}
auth.impl.ldap.base.provider.url=${ldap.import.base.provider.url}
ldap.import.enabled=false
ldap.import.on.startup=false

etc .....
Is there any setting wrong. We are not using LDAP at all. The above problem comes rarely only.

[venkata subrahmanyam adapa, modificado 14 Anos atrás.]

Hi,
our above issue is solved. The liferay is storing the changed password in the users cookies and not updating in the database atall. So next time it is taking old password only. Once the user deletes the cookies and tries then working fine.



We have added session.enable.persistent.cookies=false in portal-ext.properties.