Password resend bypasses CAS

12667
Reporter: mdoering
Type: Bug
Summary: Password resend bypasses CAS
Priority: Major
Resolution: WontFix
Status: Closed
Created: 2013-01-26 15:14:30.916
Updated: 2013-09-02 13:46:29.572
Resolved: 2013-02-18 16:45:00.81
        
Description: When requesting a password to be resend you get an email with a link to change your password.
If you follow that link it will log you into your drupal account so your password can be modified. This works well, but the problem is that this is a pure drupal solution bypassing CAS. The created login therefore is no single sign on and does not work in the java portal where you need to login again!]]>
    

Author: mdoering@gbif.org
Comment: we removed CAS, so this is not of interest anymore
Created: 2013-02-18 16:45:00.884
Updated: 2013-02-18 16:45:00.884