I am running 8.0.4 with about 80 existing users in our system. We closed the system for awhile as we made some changes and we are now ready to release the next version of our site.

One of the changes entails switching from Username to Email as the account identifier for login. I've made the Administration changes to the system and our users are able to log in using their email now. Thank you!

When a user forgets his or her password, though, the password reset link does not appear to work correctly. The email is sent. The link is correct (matching the token in the Users table). The expiration date is set to one day in advance (again confirmed in the User table). But, when the user attempts to use the link, the following error occurs every time:

The password reset link has expired and is no longer valid.

Any suggestions? Am I configuring something wrong, or is this a possible bug? How would I confirm either?

Is this what you mean?

Here is the text found in EMAIL_PASSWORD_REMINDER_BODY.Text:

Dear [User:DisplayName],

You have requested a Password Reset Token from [Portal:PortalName].

Please login using the following information:

Website Address: [Portal:URL]

Username:   [User:Username]

Link to reset password: [Portal:PASSWORDREMINDERURL]?ctl=PasswordReset&resetToken=[Membership:PasswordResetToken]

Sincerely,

[Portal:PortalName]

*Note: If you did not request a Password Reset Token, please disregard this Message.

 

Sebastian, thank you for your help.  I finally figured out what was going on.  I'll fill you in just to document what I found.

I created a new site to go with the DNN version upgrade.  There were significant design changes as well.  So, I created a second portal for the new site.

In order to keep the User ID's and passwords from the old site, I created a Portal Group and connected the two sites.  I had the old site as the "Parent" and the new site as the "Child."

The password reset link sent the User to the new "child" site and it was not working.  When I used the same syntax but pointed to the "parent" site instead, the link worked.  I'm not exactly sure why.

I really don't want them to go to the old site once this change is in place, so I changed the parent-child relationship in the portal group.  I need to make some other changes to the user profiles, etc.  But, the password reset link works just as expected!

Thanks again for your help in troubleshooting this.  Your questions got me going down the right path.

Blessings,

Pete