Force Password change not working


#1

Hello community,

here is my problem:

I want to force password change for a group of users but it does not work.

When I set Force Password Change for any user or group the user sees the login screen prompting “Change Password” with a grey “OK” button without function and cannot proceed. After “cancel force password change” in admin panel the user can log in as normal again.

What i already did:

i searched the forums, overlooked all plugins and parameters and cannot detect a solution, maybe anyone here can help?
I deleted the three cache files pydio/data/cache/plugins_*.ser but no change.

_edit: _
This is from the php logfile:

[timexxx] [php7:notice] [pid 15450] [client ipXXXX] [host www.xxx.xx] [PYDIO] IP XXXX | user shared | Error | error l.70 | from SecureTokenMiddleware.php | message=You are not allowed to access this resource

[timeyyy] [ssl:warn] [pid 4059] [client [host AH01909: yyy.com:443:0 server certificate does NOT include an ID which matches the server name

Server logfile says
ip - - [07/Nov/2018:09:47:01 +0100] “POST /abcde/fgh/index.php? HTTP/1.1” 200 138 “LINK” “BROWSER” “LINK”
ip - - [07/Nov/2018:09:47:01 +0100] “GET /abcde/fgh/index.php?&get_action=get_xml_registry&ws_id=0.698943541254796&secure_token=7vD0M53RlNTBKv5z2z3iXUhbhc4w5ZMB HTTP/1.1” 200 25700 “LINK” “BROWSER” “LINK”
ip - - [07/Nov/2018:09:47:02 +0100] “GET /abcde/fgh/plugins/gui.ajax/res/build/PydioCoreActions.min.js HTTP/1.1” 200 16899 “LINK” “BROWSER” “LINK”
ip - - [07/Nov/2018:09:47:02 +0100] “POST /abcde/fgh/index.php? HTTP/1.1” 200 12 “LINK” “BROWSER” “LINK”
ip - - [07/Nov/2018:09:47:02 +0100] “GET /abcde/fgh/index.php?secure_token=7vD0M53RlNTBKv5z2z3iXUhbhc4w5ZMB&get_action=get_global_binary_param&binary_id=0d2c12-LoginBoxLogo.png HTTP/1.1” 200 39747 “LINK” “BROWSER” “LINK”
ip - - [07/Nov/2018:09:47:02 +0100] “POST /abcde/fgh/index.php? HTTP/1.1” 200 0 “LINK” “BROWSER” “LINK”
ip - - [07/Nov/2018:09:47:02 +0100] “GET /abcde/fgh/UserAccount HTTP/1.1” 404 607 “LINK” “BROWSER” “LINK”

Any help on what could be the solution to get force password change working is very much appreciated.

Pydio 8.2.2 from Archive
Shared Webhosting (Apache?)
PHP 7.2

Thanks in advance, meckie


#2

Problem solved after many hours of testing: disabling Plugins/Actions/“My Dashboard” seems to corrupt the force password action. After reenabling “my dashboard” force password change works fine. Seems to be a bug.