E1: SEC: After Enabling Password Reset Feature
After enabling Password Reset feature on Release 24 and testing the password expiration notification being sent through email, multiple emails are sent to the same user for which the password is about to expire -
The issue is caused when there are multiple JAS servers configured in a clustered environment. After the Reset Password is enabled and *RSTPWDCFG record is added to F98OWSEC, all the JAS servers will run for the first time, concurrently, the logic of password expiration notification and will send each of it, one email to notify the user that the password will expire.
The development team confirmed that this is working as designed and it will happen only for the first email sent out to the first user for which the password is about to expire.