Password Reset

[Christopher Aillon]

On 03/11/2009 07:05 AM, Mike McGrath wrote:
> On Wed, 11 Mar 2009, Colin Walters wrote:
>> If the actual goal of the reset is to close off inactive accounts, we
>> are restarting the 4 month timer when e.g. doing CVS commits
>> hopefully?
>>
> 
> We've talked about that type of thing.  It's more of a "wouldn't it be
> nice".  The problem is we've got thousands of contributors, relatively few
> of them actually commit to cvs.  So we could go around to figure out how
> to make all of our various auth points report back but that's a lot of
> work.  The account system is the only common point of entry for every
> contributor.

So let's require to them to simply _log in_ to FAS to reset the timer 
(you need to do that to change passwords, anyway!).

Then, if other groups want to implement the timer reset for CVS commits, 
wiki edits, openID usage, etc. they can, and nobody needs to worry 
because there is a way for everyone to reset the timer.  Just some 
groups may have more.