search

ohmage / server

The ohmage server application.
37 stars 25 forks source link

reset password doesn't work #327

Closed hongsudt closed 12 years ago

hongsudt commented 12 years ago

I tried to reset the password for ohmage.ht3. I got an email with the following password: lBEiZQIlHZiwP5qXwQ2lzRN8FCxYEqNU

First of all, I don't think the password conforms to our policy. I don't see any special character such as "." or "*" And when I cut and paste the password, I got the following error:

The login information you entered is incorrect Please check name and password and try again.

jshslsky commented 12 years ago

I cannot recreate this -- can you try again?

The reason that the password doesn't contain any special characters is because the user will be prompted to change their password upon successful login.

hongsudt commented 12 years ago

I still can't login with the password that was sent to me.

On Fri, May 11, 2012 at 8:10 AM, Joshua Selsky < reply@reply.github.com

wrote:

I cannot recreate this -- can you try again?

The reason that the password doesn't contain any special characters is because the user will be prompted to change their password upon successful login.

Reply to this email directly or view it on GitHub: https://github.com/cens/ohmageServer/issues/327#issuecomment-5652909

jshslsky commented 12 years ago

I believe this is because the temporary password will expire. You will need to go through the reset process again.

jshslsky commented 12 years ago

@jeroenooms can you test this on Linux?

jshslsky commented 12 years ago

One possible solution here to Hongsuda's issue with the non-conformant password is to create a link that will automatically pop-up the change password dialog.

jeroen commented 12 years ago

I am also getting the 'The login information you entered is incorrect'. Did you already change the passwd?

hongsudt commented 12 years ago

What browser did you test this on? Is this on firefox?

On Fri, May 11, 2012 at 1:26 PM, jeroenooms < reply@reply.github.com

wrote:

I am also getting the 'The login information you entered is incorrect'. Did you already change the passwd?

Reply to this email directly or view it on GitHub: https://github.com/cens/ohmageServer/issues/327#issuecomment-5660142

jojenki commented 12 years ago

I have attempted to recreate it on my machine but cannot. I was running Firefox, but it was under Mac OS X.

I observed this on @hongsudt's machine, but it was intermittent. Sometimes the exact same "new password" would work and sometimes it wouldn't. In order to better diagnose this, we may need to borrow your computer for a few @hongsudt.

jojenki commented 12 years ago

The issue was the user. :)

Extra characters were being copied, so the password that was being pasted in was, as the server said, wrong.

hongsudt commented 12 years ago

I admitted the mistake!! :(

My question is should we make the password shorter, so people can type instead of having to cut and paste.. Maybe no more than 10 characters?

On Wed, May 16, 2012 at 5:36 PM, John Jenkins < reply@reply.github.com

wrote:

The issue was the user. :)

Extra characters were being copied, so the password that was being pasted in was, as the server said, wrong.

Reply to this email directly or view it on GitHub: https://github.com/cens/ohmageServer/issues/327#issuecomment-5755748

jojenki commented 12 years ago

I suspect that people will still copy and paste it. The initial reason for making it so long was because sending an email with those special characters was causing some issues. By making it so long, we can increase the complexity. That said, if it were 10 alphanumeric characters, that would amount to 62^10 combinations.