Hi,
When a new user logs into a Drupal 7 website using openid credentials then system sends an email to user informing that profile is waiting to be approved by admin. When admin unblocks the user an email is sent to the user with one time log in access. Now as soon as the user logs in using the link provided in that email a page prompts user to enter old password and also a new one. Now as the user has logged in using openid credentials then he should not be asked to change password. Please advise.

Comments

juliangb’s picture

juliangb commented
Project: OpenID URL » Drupal core
Version: 7.x-1.0 » 7.x-dev
Component: Code » openid.module

This is talking about the openid module in core rather than the openidurl contrib module.

catch’s picture

catch
he/him
Primary language English
commented
Title: Password issues for new users » OpenID + admin approval results in unnecessary password change e-mails to new users
Version: 7.x-dev » 8.x-dev
Priority: Major » Normal
Issue tags: +Needs backport to D7

Re-titling so it's more obvious what this is about.

As far as I can tell this bug only appears when

1. OpenID is enabled.
2. Admin approval is required for new user accounts.

And while it's confusing/annoying, it could at minimum be worked around by altering the user e-mail settings on your site.

So I am downgrading from major. Doubt this can be fixed without breaking string freeze, but adding backport tag just in case.

thinkling’s picture

thinkling commented

I get this behavior when email verification is on and admin approval is not.

The email-address-verification email uses the token [user:one-time-login-url] to give the user a one-time login, and it seems it is the handling of that URL that leads to pages asking the user to pick a password. (In other words, just rephrasing the email text doesn't get rid of the problem.)

Is there a workaround for this which retains email verification?

thinkling’s picture

thinkling commented

To clarify: the subject probably needs restating--the issue is not just the text of the emails sent out, but also the workflow when a user clicks the one-time login link required by account verification.

star-szr’s picture

star-szr
he/him
Primary language English
commented
Version: 8.x-dev » 7.x-dev
Issue summary: View changes

Bumping back to D7 because of https://www.drupal.org/node/2116417.

Status: Active » Closed (outdated)

Automatically closed because Drupal 7 security and bugfix support has ended as of 5 January 2025. If the issue verifiably applies to later versions, please reopen with details and update the version.