reset-password

Force validation of blank passwords in Authlogic

I'm adding a password reset feature to my Rails application that uses Authlogic. I was following the guide here: http://www.binarylogic.com/2008/11/16/tutorial-reset-passwords-with-authlogic/ and everything works as I'd like except for one thing: the password reset form accepts blank passwords and simply doesn't change them. I've been s...

What is safer? Should I send an email with a URL that expires to users to reset their password or should I email a newly generated password?

I was wondering what would be the safer option when users have forgotten their password Send a randomly generated new password to the email address (all email addresses in my database are confirmed to work). Or Send an email with a link that expires within a certain time frame where the user can reset their password. Aside from t...

Set Password in Open Directory from .NET

There are a lot of good resources on how to set a password in Active Directory using .NET - but how would I do the same thing in Open Directory? Is there a way to programatically set a password in Open Directory using .NET? ...

.NET Membership - Register, login etc. works. Password reset doesn't...

I'm trying to allow for reset password functionality to my site without utilizing question/answer functionality (this is deactivated in the membership entry in web.config). However when calling resetPassword (using the automatically generated controller/service/provider from the .NET MVC framework) an error is thrown (Input string was n...

Secure way to do password retrieval/resetting?

Before I begin, my reason for not using OAuth is I believe it is not really something we should be using on this project, we're targeting a platform that will be packaged and resold to companies, which connect to their own set of uses that we really don't want to have accounts that we are not %100 in control of, we don't want it to be a ...

Ruby on rails Authlogic gem and Password_Reset without ending in Edit

I followed this password_reset tutorial and was able to get it working. But there are a few things I don't like about it that I want to change. I'd like it to say password_reset rather than reset_passwords in the url. Which I've managed to accomplish by renaming the controller and routing it in config/routes.rb as map.resources :reset_...