Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 516558

Summary: Can't change password
Product: Community Reporter: Michael Golubev <borlander>
Component: Accounts.eclipse.orgAssignee: Eclipse Webmaster <webmaster>
Status: RESOLVED FIXED QA Contact:
Severity: critical    
Priority: P2 CC: chris.guindon, webmaster
Version: unspecified   
Target Milestone: ---   
Hardware: PC   
OS: Mac OS X   
Whiteboard:
Attachments:
Description Flags
Login page screenshot with "...Try new password.. " message none

Description Michael Golubev CLA 2017-05-12 04:37:24 EDT 
I had been required to change my Eclipse password (by "Your password will expire in X days" emails from Eclipse. 

But when I am actually trying to update one (at https://accounts.eclipse.org/user/73844/edit Account Settings tab), after pressing Save, I am being redirected to the Login page like the attached screenshot. 

The login page shows "Password change has been submitted... Please try to login with new password" message. However the new password does not work, while the old one which is about to expire does work at both Login Page or at the Bugzilla login, which allowed me to submit this bug.
Comment 1 Michael Golubev CLA 2017-05-12 04:40:27 EDT 
Created attachment 268306 [details]
Login page screenshot with "...Try new password.. " message
Comment 2 Michael Golubev CLA 2017-05-12 04:45:20 EDT 
Furthermore, I just found a couple of emails in my mail box, like this one: 

Dear Michael Golubev,

The password of your eclipse.org account has been successfully updated on
Fri, 2017-05-12 04:30 from [XXX.XXX.XXX.XXX].

Still, only the old password actually works, and not the updated one
Comment 3 Christopher Guindon CLA 2017-05-12 11:28:14 EDT 
(In reply to Michael Golubev from comment #0)
> I had been required to change my Eclipse password (by "Your password will
> expire in X days" emails from Eclipse. 
> 
> But when I am actually trying to update one (at
> https://accounts.eclipse.org/user/73844/edit Account Settings tab), after
> pressing Save, I am being redirected to the Login page like the attached
> screenshot. 

We automatically logout users after they submit a password change request.

> 
> The login page shows "Password change has been submitted... Please try to
> login with new password" message. However the new password does not work,
> while the old one which is about to expire does work at both Login Page or
> at the Bugzilla login, which allowed me to submit this bug.


I can confirm that this is an issue when using the "Forget my password" page and when the user tries to update his password on the Edit my profile page.

I am upping the priority for this bug.
Comment 4 Christopher Guindon CLA 2017-05-15 09:14:34 EDT 
After our investigation on Friday, we were able to detect a problem with our LDAP configuration. 

Assigning to webmaster.
Comment 5 Eclipse Webmaster CLA 2017-05-19 16:19:16 EDT 
A timeout for idle connections had been added, and that had the side effect of killing the connection that the reset/change process relied on.  We've removed it.

-M.