Continue to have password reset issues

The last two times that I've forgotten my manager username and password, ModX has been unable to properly reset my password so that I can log back in.

The first time it happened, I searched these boards and the only solution that worked was to install a new version, and rebuild.

Thinking that my first encounter with this issue was a fluke, I moved on with my life...until today. Upon realizing that I no longer remembered the correct password, I attempted to reset the manager password using the built-in option on the login page.

Here's how it went:

• I realized that my diligence for secure passwords and my lack of organization skills was again posing an problem in my life
• I clicked on "Forgot your login?" and entered my manager username
• The re-activation email was sent to my email address
• I clicked on the link in the email and copied the new password into a text editor to ensure no strange formatting would be in the version that I would paste into the MODx Manager
• I then got the message "Activation key does not match! Please check your activation email and make sure you loaded the right URL."

My username is not blocked in the DB (checked user_attributes) so I'm not sure why there continues to be a mismatch between the activation key embedded in the email's link, This is quite a frustrating issue that will prevent me from recommending it for larger sites.

FYI, I'm running Revo 2.2.4.

I really Anyone know what the root cause of this issue is? Temporary solutions/workarounds don't eliminate the problem altogether. I really appreciate the work folks have put into this CMS (I've been using ModX for the past 6-7 years) so please don't take my frustration the wrong way but this needs to be fixed, no way to sugarcoat it.

Check the database users table. Find your username, check that the role is set to Primary Group and Sudo are set to 1. If not, set them.

Then check the roles table, your user should have a role of Super User.

Try again and let us know. We'll go from there if it doesn't work. [ed. note: frogabog last edited this post 14 years ago.]

Both were set to 1 and I did have the Super User role. I've since wiped my installation and started fresh due to the fact that I needed to get the site back up and running properly.

Also, I was the only account holder on the site and created the account during the setup wizard process when it asks to create the admin account

Please upgrade to 2.2.5; I know of one bug in 2.2.4 that may have caused issues due to the way it's stored in the database (modRegistry).

And really.. nuking a site is not even close to the best answer. You could've created a new account or reset your password in the database directly if the regular functionality isn't working which would've saved you wiping out everything you worked on...

One solution is to create or go to another working MODX site (using the same Version of MODX) where you know the password and cut-and-paste the values from the modx_users table from there to the broken site.

If this happens often, you might want to save those values somewhere with a note on the username and password.


That said, the "forgot password" system should probably work more reliably.

------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using.
MODX info for everyone: http://bobsguides.com/modx.html

Hi,
I'm having the same issue on a 2.2.8pl installation. Out of the blue the manager locked me out.
With the id=1 acount, sudo and manager. terribly annoying.
Bob's sugestion (copying the password form another dbase) does not work. i keep getting

the 'forgot password' func also does not work.
@mark how does that work; resetting the password directly in te db?
HELP!
tnx
Rdg

Check the error log (core/cache/logs/error.log) as there can be different reasons for getting locked out. If forgot password is not working either it might be that a table has crashed (sessions or users) causing it to not be able of writing new stuff to it.

Instructions for manually resetting in the DB can be found here: http://rtfm.modx.com/revolution/2.x/administering-your-site/security/troubleshooting-security/resetting-a-user-password-manually

Sorry to tack on to this old post. But I'm now experiencing this issue in a Revo 2.2.14 installation. In testing the forgot password link (for the manager login) I received the password reset email, followed the link in the email, pasted in the new pw sent in the email, clicked the Login button and the login failed. No error message, just a page refresh landing on the same manager login screen. (Tried three times, same results.)

I am NOT locked out per say, as I am testing this with an editor user account not my own. There is nothing in the error log.

Where else might I check? [ed. note: lucy last edited this post 12 years, 3 months ago.]

Try clearing the browser cookies for the domain in question. Straggling browser cookies can be a pain and sometimes the behaviour you're describing.

Thanks Garry, that seemed like such a promising idea! But I cleared all browsing history, cache and cookies, and still no luck. It does seem that a function that comes packaged with a basic MODX install ought to work...