tracker issue : CF-3187494

Problem:

Installed CF 10, but post install, at the configuration screen, forgot my password. So, we navigated to the “neo-security.xml” and changed the “admin.security.enabled” attribute from true to false? re-started the server.
 
Post this, we were successfully navigated inside the CF administrator. Now, we wish to set an admin password and thus go to: Security? Administrator? select Use Single password only option
 
Once we enter the “New” and “Confirm” password and Submit changes, it is giving us an error message to “Enter the Old Password, as the same cannot be left blank”.
 
Logically, it shouldn’t: the user doesn’t remember the password which he/she has used during install, therefore changes have been made in the neo file to by-pass the login screen and then set the admin password via the Security option available inside. {which we are not able to do/achieve}


****  Please note that, once this process is done the “admin.security.enabled” attribute also changes to True {even if the password is not set}
Comparing to CF9: This was not the behavior in CF9 and we were able to set a new admin password.
Method: na

Result: 

Once we enter the “New” and “Confirm” password and Submit changes, it is giving us an error message to “Enter the Old Password, as the same cannot be left blank”.

Expected:

Moving from “no authentication needed” to any other password option should not prompt for old password information.

Workaround: na

----------------------------- Additional Watson Details -----------------------------

Watson Bug ID:	3187494

External Customer Info:
External Company:  
External Customer Name:  
External Customer Email:

Attachments:

Comments: