Launchpad itself

changing ones password renders both old and new passwords invalid

Bug #564335 reported by Steve McInerney
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Launchpad itself
Invalid
Undecided
Unassigned

Bug Description

Via +reviewaccount I changed my password.
Then attempted to login using multiple browsers. All failed with both old and new passwords.
Was *only* able to successfully log in by going to login.u.c and asking for a 'Forgotten password' reset. And setting the password to a new, 3rd, one.

Perhaps more ... curious, and unexpectedly: within firefox (main browser)
If I logged off during this 'borked password' phase, and then 'login' I am *immediately* logged in - with no ask for a password/userid.

Which makes switching to another user in the same browser... difficult.

Revision history for this message
Robert Collins (lifeless) wrote :

LP doesn't maintain passwords anymore, perhaps +reviewaccount should just have the password stuff deleted, made into a link to l.u.c. ?

Revision history for this message
Curtis Hovey (sinzui) wrote :

I think we need to remove that password field because SSO owns the data.

affects: launchpad → launchpad-foundations
Revision history for this message
Steve McInerney (spm) wrote :

Hrm. Was actually using the wrong 'old' password. So possible pebkac in there. :-(

Revision history for this message
Gary Poster (gary) wrote :

+reviewaccount no longer has password stuff on edge, when I checked today.

Going to mark as Invalid, in hopes of pebkac diagnosis.

Note also bug 568106, which might be moderately related...or not at all.

Changed in launchpad-foundations:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.