Let's go!
I not resisted to:
download class.wp.w3all-phpbb.php from your site and apply the patch directly, after that i've test it successfully into another online multisite wordpress, and into ant my localhost tests.
The coming 2.4.4 will contain this fix as option
So i registered a new account.
Then i activated. Success.
Then i login. Success.
Then i logout and re-login. Success.
Then i logout and request new pass: success
Then i login with provided that arrive by email: success
then i logout and relogin: success.
Resolved in 3 lines of code finally. Very fast (performance cost 0: execute only when user onlogin, and only when user's pass do not match).
Will be added as option.
The hint will say +- this (in the hope that the resumed and expressed concept will be clear)
If a frontend plugin bypass the default password reset process, so that this do not let update the new WordPress password at same time into phpBB, force the user's password update into phpBB when user login in WordPress
Note: may activating this option, you'll have to allow user's logins as mandatory only into WordPress, or the user that try to login in phpBB, will fail until the phpBB password will not be updated, due to an explicit and successful login into WordPress
Activate this option if using front-end plugins to manage user's password reset processes, you note that after a password reset and then a first successful login, if the user logout then try to re-login, will get password mismatch
This option is may not required into default WordPress installations
///////////
// Scenario: password mismatch after a successful reset, then succesful login, then logout and re-login. Password do not match.
// Problem: if a frontend plugin bypass default password reset process, so to do not let update the new wp password at same time into phpBB,
// force the password update into phpBB onlogin in wordpress.
2.4.4 will be released on next hours and will contain this fix and all the rest
p.s this can only be an option. Due to the logic behind the problem, any fix i did in the past failed. This way will be ok for any frontend plugin that can now work his own way (It is not necessary to activate this option into a default wordpress multisite).
p.sss there is
test1 user to be removed into your penny! Sorry i do not have login with the other admin user to remove him!