Why no password reset option?

[physikal]

I constantly get complaints about users not being able to choose " forgot password ".

Why is it this is not available? I tried searching the forums but did not find anything. Thanks!

[dave_kempe]

what exactly are you after? an option to have their password reset like a forum would do? you would normally email the person their password or make them click a link to reset it... given zimbra is the mail server, I am not sure how that would work...
If you want to change your password after logging in, that is in preferences.

[physikal]

Well we have some users that login only once a month, or less, and then they like to talk about how lame it is that there is no "forgot password" option at the login screen so they can retrieve their password, since they forgot it. They don't like having to send it a ticket to request a reset.

In a way I agree with them, it would be nice. But at the same time, I just tell them to login more than once a month and they won't forget their pw.

[phoenix]

Originally Posted by physikal

Well we have some users that login only once a month, or less, and then they like to talk about how lame it is that there is no "forgot password" option at the login screen so they can retrieve their password, since they forgot it. They don't like having to send it a ticket to request a reset.

In a way I agree with them, it would be nice. But at the same time, I just tell them to login more than once a month and they won't forget their pw.

Where do you expect the password to be sent to? They are logging into their own mail account on your server, if there was a 'reset password' wouldn't it go to the account where they can't login? The logic of that escapes me somewhat, unless you have some other solution in mind.

[physikal]

Very good point. But at the same time, Yahoo, Google, Hotmail, all of them seem to do it? I would assume the same way they do.

Series of security questions followed by which email would you like it to be sent to, etc. etc. And for added security, maybe the ability to use the "forgot password" option is a setting that has to be "allowed" or enabled by an administrator, so that not all accounts have it enabled by default. Like admin accounts.

[phoenix]

Originally Posted by physikal

Very good point. But at the same time, Yahoo, Google, Hotmail, all of them seem to do it? I would assume the same way they do.

Series of security questions followed by which email would you like it to be sent to, etc. etc. And for added security, maybe the ability to use the "forgot password" option is a setting that has to be "allowed" or enabled by an administrator, so that not all accounts have it enabled by default. Like admin accounts.

Well, the usual answer applies, if you think it's a valid request you should file an RFE in bugzilla.

[dave_kempe]

There would also be nothing stopping you making a little web app that added this function on top of the zimbra apis etc.