Allow for E-mail tokens to be sent to alternate e-mail address

[GoogleCodeExporter]

Enhancement request:

Not only do we store an organization e-mail address in LDAP (the mail 
attribute),but we are starting to store an alternate e-mail address 
(mailAlternate attribute).  Two requests:

1) For the Forgotten Password module when Require Email Token is set to true, 
it seems that by default it is using the mail attribute.  Could that be 
configurable so that it could be set to another attribute?  We want to do this 
because when we change people's Novell passwords, it changes their GoogleApps 
password as well.

2) After I've successfully identified myself for a forgotten password, could 
PWM give a little reminder of the set alternate e-mail address?  So, if my 
alternate e-mail is bsmith@gmail.com, could there be a message like "We have 
sent a security code to your alternate e-mail address, b...h@gmail.com".

Max

Original issue reported on code.google.com by mmcgr...@carthage.edu on 10 Oct 2012 at 9:07

[GoogleCodeExporter]

I think 1) is a bug.

The "To" field is configurable in the email template for Forgotten Password 
Verifcation token email but regardless of what you put in this field e.g 
@LDAP:mailAlternate@ the email still goes to the first value of the user's mail 
attribute.

Original comment by idvault....@l5test.ucd.ie on 4 May 2015 at 9:09