Login without password

I can login to the manager as my admin account without the password. This is happening in both 2.0.0 and 2.0.1. What am I doing wrong to allow this? I was hoping to go forward with MODX for a project, but this security issue will not allow me to move forward. I have no clue what is happening.

Did you install any user integrations? Do anything odd? Are you sure the password isn’t blank for some reason? Is there a hash in the password column for your user in the modx_users table?

Also:

Note: If you’re posting about a bug, please state all of your Environment information in your post: Version of MODx, Traditional or Advanced distribution (for Revo), Server OS, Server Version, PHP Version, MySQL Version (client and server), is pdo_mysql installed, your Browser type and version, if you are using any opcode caching such as eAccelerator, APC, winCache, xCache, etc; any relevant errors in core/cache/logs/error.log, and any other environment data we should know. We can’t help you without that information.

Sorry about that I thought I had pasted i my configuration information.

It was the Active Directory plugin. I did a fresh install and did not add the active directory plugin. Now all user passwords are enforced.

Yes, is a bug with the modActiveDirectory plugin. I’ll get a patch up today for it.

Great. I will try the new plugin when it is ready.

Here is my configuration

Versions 2.0.0 and 2.0.1
Traditional distribution
Windows Server 2003 R2
Apache 2.2.11
PHP 5.3.3
MySQL 5.1.30-community
pdo_myql installed

I’ve released a patch that should fix the issue.