I did add

security.policy.password.expiration.days=999999
security.policy.password.expiration.enabled=false

in D:\apps\apache-tomcat-6.0.18\conf\security.properties

worked well.

KUno

-----Urspr?ngliche Nachricht-----
Von: Marc Lustig [mailto:m...@marclustig.com]
Gesendet: Dienstag, 3. Februar 2009 17:12
An: users@archiva.apache.org
Betreff: Re: Archiva will not stop forcing password resets!



Have you checked out this: 
http://continuum.apache.org/docs/1.2.2/administrator_guides/security/customising-security.html
?
(continuum has the same auth-system)


Zach Cox wrote:
>
> We installed Archiva 1.1 last summer for internal project use.  When
> creating every user in the system, we always uncheck the "Force User
> to Change Password" checkbox in User Management, because it's
> incredibly annoying and completely unnecessary for us.
>
> However, since we installed Archiva it has forced all of our users to
> change their passwords several times.  During this latest round of
> forced password changes, all of the users seem to get Locked even
> after they successfully change the password.  Even if I sign in as
> admin and unlock them, as soon as they try to sign-in again Archiva
> immediately locks them and they cannot sign in.  I'm not sure how to
> fix this other than to delete all of the users and re-create them
> (which is just ridiculous - there has to be a better way).
>
> I've seen lots of messages on the mailing list about this force
> password change/locked user problem, but no one ever seems to offer
> any definitive answers or workarounds.
>
> Is there a way in Archiva 1.1 to COMPLETELY disable this forced
> password changing?  Also, in Archiva 1.1 how can I ACTUALLY unlock
> users so they can continue to use the system?
>
> Thanks,
> Zach
>

--
View this message in context: 
http://www.nabble.com/Archiva-will-not-stop-forcing-password-resets%21-tp21792131p21813019.html
Sent from the archiva-users mailing list archive at Nabble.com.

Reply via email to