0

I have a develop and a production version of a site running behind a firewall. In production the users passwords are somehow being reverted and once the user resets it, they get a random amount of time and are required to reset it again. I cannot track this down. Looking for any suggestions on what is going on. I have looked in the logs, but don't see any flags.

Setup consists of 3 servers. One for Drupal App, One for MySql DB, One for Solr.

0

Here are some suggestions/things to check based on your description:

  1. If the user passwords on production are reverting after a recent deployment, check to make sure that your settings.php file on production doesn't point to the development instance's database (you may be inadvertently repointed production to a backup copy/development copy of the database by pushing changes in settings.php).

  2. Check to see if your site is utilizing a password management module. If so, doublecheck/resave expiration settings (as well as if any security/recommended updates are available). Common password management/expiration modules include:

  3. Check to see if there are any custom rules (either using Rules module or programmatically implemented with a custom module) in place that force a user to reset password after a set duration/period of time/number of logins.

  4. Check to see if the site's user accounts are tied to an external user account provisioning/login system such as LDAP or a Single Sign On service (as well as if any security/recommended updates are available). If one of these are in place, then you may need to check password expiration policies at the account provider. Examples SSO service modules for Drupal include:

    • Janrain - integration with the commercial Janrain service
    • Google Apps Authentication
    • SimpleSAMLphp Auth - integration with the open source library SimpleSAMLphp
    • HybridAuth Social Login - integration with the HybridAuth library
    • Bakery - SSO among Drupal installations on the same parent domain
    • Account Sync - provides SSO functionality and account info synchronization among Drupal installations.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.