One time login password change is also redirected

I do have the same problem... working on a patch

function front_page_user($op, &$edit, &$account, $category = NULL){	
	if($op == 'load'){
	 if(!$account->login && $account->uid != 0 && $account->access && arg(5) == 'login'){
  		drupal_set_message(t('This is your first login. Make sure to !url first.',array('!url'=>l(t('modify your password'),'user/'.$account->uid.'/edit'))));
  	 }
	}
}

thanks for the patch rapsli. I'll aim to include this in the next update of the module (for version 7.x)

Patch to solve the redirect at the one time login after a user has requested a new password:
Add this code to the front_page.module at the begin of the function front_page()

<?php
$ref = $_SERVER['HTTP_REFERER'];
if (stripos($ref, 'user/reset/') !== false ) {
        global $user;
 	$output = 'user/'.$user->uid.'/edit';
 	drupal_goto($path = $output, $query = null, $fragment = null);
	return;
}
?>

Does the issue still exists? (setting status back to "active" as there is no patch).

Cross-referencing #1291524: Users sign up, back to the front page.

I suspect it still exists in current version.

Unassigning.

In an effort not to create duplicate issues, is anyone working on this?

I have a need to be able to define pages not to be redirected. I'm developing a mobile app that uses xmlrpc calls, and when users that have a front_page set use it, they get a redirect and the xmlrpc call fails. If there would be a way to omit /xmlrpc.php from redirects, it would work nicely.

Since 2.3, that shouldn't redirect people visiting something else than index.php.
Doesn't it work that way? Can you confirm you have the latest version?

It doesn't work again. One time login redirects to the main page instead of password change. Please help.

Same problem, still happening.

Sorry, my bad...I didn't see I had a rule redirecting the user at login...

I have run into this problem on a Drupal 7 site running front 7.x-2.4.

New users cannot activate their account initially after the "one-time page", nor can existing users reset their password. In both cases, clicking the "Login" button on the "one time" page results in the role-specific front page being displayed (instead of their account). On this site the front configuration roles are all using aliases (e.g. not REDIRECT, FULL, THEMED, etc.).

Same as above, it was actually a trigger causing this issue, not the front module.