How to Reset a Password

The Reset Password feature can be displayed on your users’ Login screen.

If enabled, users can reset their own password if they have forgotten it or are locked out.

Follow the setup steps below to activate the feature.

Note: Some controls are shared with the Driver Portal Forgot Username / Forgot Password feature.

User Details

There is a system user called passwordreset_.

This user is the sender for password reset emails.

Check the Name and Email fields
Update them if required

Role and Expiry Details

The passwordreset_ user is linked to the passwordreset role.

The Session Timeout field (Roles / Details) controls how long reset links remain valid
Default is 2 days
Adjust as required

Global Controls

Review the following controls:

Module	Name	Description	Default
gb	passwordautorecovery_flag	Enables Reset Password feature	no
gb	driverportalpasswordautorecovery_flag	Enables Driver Portal forgot password feature	no
gb	passwordforgottenuseridmessage	Message when user ID not found or restricted	Please contact client by phone on 1300 XXX XXX or by email client@client.com.au
gb	passwordforgottenmessage	Confirmation message after reset email sent	Thank you. An e-mail will be sent shortly...
gb	passwordresetaccessdeniedmessage	Message for expired/used link	The Password Reset hyperlink has expired...
gb	passwordresetactivesessionexists_message	Message when reset email already exists	An email containing password reset instructions has already been sent...
gb	passwordresetsuccess_message	Message after successful reset	Your password has been reset. Re-login required...

Email Message Configuration

Run setup in Staging first
Review email content before production release
Shared with Driver Portal Forgot Password feature

Email Setup Requirements

Email template must be: pdfpasswordreset
Sender uses system user passwordreset_
Name and email can be overridden if required
Subject must be configured appropriately
Message must include:
- #passwordreseturl# (required)
- Optional: #signon_timeout#

Event Logs

Password reset activity is logged in:

gb_eventlog
gbuseraccess_log (records all reset attempts)

Useful Queries

SELECT * FROM gb_controls WHERE name LIKE 'password_%';

SELECT full_name,email 
FROM gb_users 
WHERE user_login = '_password_reset_';

SELECT mail_sender_name,mail_sender_address 
FROM gb_templates 
WHERE name = 'pdf_password_reset';

SELECT * 
FROM gb_eventlog 
WHERE narrative LIKE 'RESET%' 
ORDER BY timestamp DESC 
LIMIT 10;

SELECT * 
FROM gb_user_access_log 
WHERE access_type IN ('reset','fiel','fail-hash') 
ORDER BY timestamp DESC 
LIMIT 10;