I've enabled user accounts to be created by invite only. When the recipient of the invite clicks the invite link and creates an account (by entering the email address and the desired username), the password is autogenerated and sent to the user.

The password that is emailed to the user does not work. FYI, I have installed Salt version 5.x-1.0beta on Drupal 5.11.

However, if the user clicks the one-time auto-login link and then creates his/her own password, this password works fine.

I'm thinking that the Drupal autogenerated password is not salted (or salted incorrectly)?! Thanks.

Comments

Zen’s picture

Zen commented
Version: 5.x-1.0-beta » 6.x-1.x-dev
Status: Active » Closed (duplicate)

Dupe of #327220: Autogenerated password not salted.

The "fix" is to not include the password in the welcome e-mail and just rely on the login-link.