Why no password reset option?

[physikal]

I constantly get complaints about users not being able to choose " forgot password ".

Why is it this is not available? I tried searching the forums but did not find anything. Thanks!

[dave_kempe]

what exactly are you after? an option to have their password reset like a forum would do? you would normally email the person their password or make them click a link to reset it... given zimbra is the mail server, I am not sure how that would work...
If you want to change your password after logging in, that is in preferences.

[physikal]

Well we have some users that login only once a month, or less, and then they like to talk about how lame it is that there is no "forgot password" option at the login screen so they can retrieve their password, since they forgot it. They don't like having to send it a ticket to request a reset.

In a way I agree with them, it would be nice. But at the same time, I just tell them to login more than once a month and they won't forget their pw.

[phoenix]

Well we have some users that login only once a month, or less, and then they like to talk about how lame it is that there is no "forgot password" option at the login screen so they can retrieve their password, since they forgot it. They don't like having to send it a ticket to request a reset.

In a way I agree with them, it would be nice. But at the same time, I just tell them to login more than once a month and they won't forget their pw.

Where do you expect the password to be sent to? They are logging into their own mail account on your server, if there was a 'reset password' wouldn't it go to the account where they can't login? The logic of that escapes me somewhat, unless you have some other solution in mind.

[physikal]

Very good point. But at the same time, Yahoo, Google, Hotmail, all of them seem to do it? I would assume the same way they do.

Series of security questions followed by which email would you like it to be sent to, etc. etc. And for added security, maybe the ability to use the "forgot password" option is a setting that has to be "allowed" or enabled by an administrator, so that not all accounts have it enabled by default. Like admin accounts.

[phoenix]

Very good point. But at the same time, Yahoo, Google, Hotmail, all of them seem to do it? I would assume the same way they do.

Series of security questions followed by which email would you like it to be sent to, etc. etc. And for added security, maybe the ability to use the "forgot password" option is a setting that has to be "allowed" or enabled by an administrator, so that not all accounts have it enabled by default. Like admin accounts.

Well, the usual answer applies, if you think it's a valid request you should file an RFE in bugzilla.

[dave_kempe]

There would also be nothing stopping you making a little web app that added this function on top of the zimbra apis etc.

[pkar]

Hello,
although it's been a very old post, is there anything out there about resetting a password for a user ?
(by using some kind of secret passprhase - series of questions etc ... ??)

Does anyone know about any 3rd party add on for that ?

Thank you,

[Roger75]

Hello,
although it's been a very old post, is there anything out there about resetting a password for a user ?
(by using some kind of secret passprhase - series of questions etc ... ??)

Does anyone know about any 3rd party add on for that ?


Thank you,

You can use sp.changePassword method.
"sp" is an instance of SoapProvisiong Java class... you could develop a Java web application using JSP+Servlets with Zimbra Java libraries.