I have DNN 7.4 running on a clients site, I logged in and set up their admin account with a random password then used the Send Password Reset button to send them a password reset link. This all worked fine but the password reset form won't allow passwords that meet or exceed the minimum, it always just throws up the blue box saying that the new password could not be accepted.

Has anyone had this on their installs of 7.4? Maybe a bug?

Thanks

Thanks Cathal, it's a fresh install with the standard settings and there are only two registered members, I'll have a look through the link you provided and do some more testing.

We recently updated to 07.04.02 (216) and are encountering the same problem. Passwords simply cannot be set by anyone, not even super users.

If you try to set a password as a SuperUser, you get this error:
"Your new password was not accepted for security reasons. Please make sure to choose a password which does not match a previously used password and which is long and complex enough to meet the sites password complexity requirements."

If you try to force a user to reset their password, and they attempt to, they get this error:
"The Website Administrator has required you to change your password, before you can log in. To do this they have marked your account as requiring a new password and sent out a password reset token email. You need to change your password before continuing. Your new password was not accepted for security reasons. Please make sure you input correct username and answer."

I've tried disabling history and banned passwords, but nothing helped. No amount of complexity will permit a password to be updated. The only workaround we have right now is to delete a user and then recreate them using the same username. It seems the only time you can set a password is at account creation time.

Any advice you could offer would be very helpful. We are looking at testing an upgrade to v8, but we're still looking for a solution to our current problem (in the event it persists into 8).