force passsword goes to loop when password policy module enabled! [#1504028]

As soon I enable http://drupal.org/project/password_policy module, and force password change for a role, all users in that role will go into a password change loop, even if we change password it will be in loop.

if I disable password_policy module then force password change will work correctly.!.

the reason for enabling http://drupal.org/project/password_policy is to force user to choose strong user password.

any idea why this is happening..?

Comments

Comment #1

cmstom

Northern California

commented 12 April 2012 at 18:32

I was using the distro Open Public, which comes with Password Policy. I was having the issue:

User would log in and be stuck at the User Edit page. I noticed that the box was checked "Force password change on next login"

I logged in as user 1 and disabled that and then tried to login with the problem account. I was still stuck.

This is what I did to resolve the issue:

Logged in as User 1
Administration > Configuration > People > Password Policies > Force Password change
Selected the roles that were affected.
Logged in as the problematic user, reset the password.
Works fine now.

Comment #2

afreeman commented 12 April 2012 at 20:06

Password Policy also implements 100% of Force Password Change's feature set, so you may have had nearly identical code in two modules duking it out for supremacy. If you already have Password Policy installed there is no need for Force Password Change as well.

Comment #3

madhusudan commented 16 April 2012 at 07:30

@ afreeman ,

there is a difference for force password in both modules.

1) "password policy" module just requests a user to change password (it doesn't forces user), so user can ignore the password change by navigating into other pages!.

2)"force password change" module forces users to change their password, and will not allow to view other pages until they change their password.

and i feel the second option is better. (we cant take any chances!).

Comment #4

rogeriodec commented 18 May 2013 at 02:34

Same here....

Comment #5

roball commented 24 May 2013 at 19:51

Category:

bug

» support

The safest solution would be to disable the "Password policy" (password_policy) module, as I did.

When password_policy is disabled, force_password_change (this module) does not have the issue reported here, so it can be declared to simply be incompatible with it. Thus changing the Issue Category from "bug report" to "support request".