1. On the bugzilla password change/set page, please please could you list what the actual constraints are? I've spent aegs trying to reset my password using Lastpass password generator, starting with my normal default, 30 character using special characters, numbers, upper & lowercase letters. This isn't allowed. Nor is 20. If you keep trying, the token expires. Infuriating. But an easy fix. Please either allow huge password length (more secure) but also list the full constraints.
2. Is there a reason why bugzilla.xfce.org and forum.xfce.org have separate user accounts?
The Bugzilla backend is a separate product from the forum backend (FluxBB) which is probably why the two are not integrated with one login.
It appears that when you try to reset your password from within bugzilla, it requires one uppercase, one lowercase, and one digit as part of the password. I just tried with a 42 character password and it worked (that included at least one uppercase, one lowercase and one digit).
Thanks for the reply. I wonder if it doesn't allow some/all special characters? It may have been that curtailing the string length simply caused some of the special characters not to be generated hence no longer falling foul of such a rule?