Is it possible to implement a "change password at next logon" type feature in the django admin?

Question

I want to be able to set an option in the user's settings that forces them to change their password upon the next login to the admin interface. Is this possible? How would it go about being implemented? I'm using the default auth model right now but not opposed to modifying or changing it. Thanks for any help.

Answer 1

From a thread on the Django Users mailing list:

This isn't ideal, but it should work (or prompt someone to propose something better).

Add a one-to-one table for the user, with a field containing the initial password (encrypted, of course, so it looks like the password in the auth_user table).

When the user logs in, have the login page check to see if the passwords match. If they do, redirect to the password change page instead of the normal redirect page.