Can we report against user password changes

[Jonathan Thomas]

In light of the recent Heartbleed vulnerability, we have completed the regen of all keys and are now asking all of our staff to change their passwords.

Is there a way that I can create a report (sql query) to show who has changed their password in the past XX days?

If not, is there a flag I can set on all user accounts to force a password change?

[Timothy]

In JIRA 6.2, there is the Audit feature (https://confluence.atlassian.com/display/JIRA/Auditing+in+JIRA). Though, I am not sure that if password change is audited.

This could help you (http://www.plugenta.com/jiraauditor/tour.html).