Forum OpenACS Q&A: Re: Recover password doesn't allow 'CanRetrieve' in 'local' authority

Yes, change:
ad_check_password
ad_change_password
ad_user_new

and change to  not use ns_passwd encription any more ....
though, store plain text passwd is not the best option.