I did add security.policy.password.expiration.days=999999 security.policy.password.expiration.enabled=false
in D:\apps\apache-tomcat-6.0.18\conf\security.properties worked well. KUno -----Urspr?ngliche Nachricht----- Von: Marc Lustig [mailto:m...@marclustig.com] Gesendet: Dienstag, 3. Februar 2009 17:12 An: users@archiva.apache.org Betreff: Re: Archiva will not stop forcing password resets! Have you checked out this: http://continuum.apache.org/docs/1.2.2/administrator_guides/security/customising-security.html ? (continuum has the same auth-system) Zach Cox wrote: > > We installed Archiva 1.1 last summer for internal project use. When > creating every user in the system, we always uncheck the "Force User > to Change Password" checkbox in User Management, because it's > incredibly annoying and completely unnecessary for us. > > However, since we installed Archiva it has forced all of our users to > change their passwords several times. During this latest round of > forced password changes, all of the users seem to get Locked even > after they successfully change the password. Even if I sign in as > admin and unlock them, as soon as they try to sign-in again Archiva > immediately locks them and they cannot sign in. I'm not sure how to > fix this other than to delete all of the users and re-create them > (which is just ridiculous - there has to be a better way). > > I've seen lots of messages on the mailing list about this force > password change/locked user problem, but no one ever seems to offer > any definitive answers or workarounds. > > Is there a way in Archiva 1.1 to COMPLETELY disable this forced > password changing? Also, in Archiva 1.1 how can I ACTUALLY unlock > users so they can continue to use the system? > > Thanks, > Zach > -- View this message in context: http://www.nabble.com/Archiva-will-not-stop-forcing-password-resets%21-tp21792131p21813019.html Sent from the archiva-users mailing list archive at Nabble.com.