- Issue created by @jimparo
- Status changed to Closed: works as designed
4 months ago 5:03pm 4 September 2024
PRLP doesn't use Password Policy Setting
Installed prlp 1.11.0, password_policy_extras 4.0.0-rc2, and password_policy 4.0.3
Configured the following password constraints:
password_username
password_policy_history_constraint
password_policy_delay_constraint
character_types
password_length
Use a one time password reset link, PRLP modifies the landing page but bypasses the Password Policy check. I am able to enter the username as the password and change my password successfully.
Closed: works as designed
4.0
Miscellaneous