In 0.7.1 I get the following result if attempting to
reset password either via username or email address. 
I've tried this on a freshly created tracker and one
upgraded from 0.6.7, which seemingly identical results.

UnboundLocalError: local variable 'otks' referenced
before assignment	Python 2.3.2
/usr/local/python2.3.2-ee-1004.1/bin/python

A problem occurred while running a Python script. Here
is the sequence of function calls leading up to the
error, with the most recent (innermost) call first. The
exception attributes are:
      __doc__ = 'Local name referenced but not bound to
a value.'
      __getitem__ = <bound method
UnboundLocalError.__getitem__ of
<exceptions.UnboundLocalError instance>>
      __init__ = <bound method
UnboundLocalError.__init__ of
<exceptions.UnboundLocalError instance>>
      __module__ = 'exceptions'
      __str__ = <bound method UnboundLocalError.__str__
of <exceptions.UnboundLocalError instance>>
      args = ("local variable 'otks' referenced before
assignment",)

/usr/local/python2.3.2-ee-1004.1/lib/python2.3/site-packages/roundup/cgi/actions.py
in handle(self=<roundup.cgi.actions.PassResetAction
instance>)
  632         # generate the one-time-key and store the
props for later
  633         otk = ''.join([random.choice(chars) for x
in range(32)])
  634         while otks.exists(otk):
      otks = undefined, global exists = undefined, otk
= 'rB5wqt3bY0zFaI4CTsuktKDtN9ARc7j5'
  635             otk = ''.join([random.choice(chars)
for x in range(32)])
  636         otks.set(otk, uid=uid)

/usr/local/python2.3.2-ee-1004.1/lib/python2.3/site-packages/roundup/cgi/actions.py
in execute(self=<roundup.cgi.actions.PassResetAction
instance>)
   32         """Execute the action specified by this
object."""
   33         self.permission()
   34         return self.handle()
      self = <roundup.cgi.actions.PassResetAction
instance>, global handle = undefined
   35 
   36     name = ''

/usr/local/python2.3.2-ee-1004.1/lib/python2.3/site-packages/roundup/cgi/client.py
in
handle_action(self=<_roundup_tracker_1.interfaces.Client
instance>)
  585 
  586         except ValueError, err:
  587             self.error_message.append(str(err))
      self = <_roundup_tracker_1.interfaces.Client
instance>, global error_message = undefined, global
append = undefined, global str = undefined, err = undefined
  588 
  589     def write(self, content):

/usr/local/python2.3.2-ee-1004.1/lib/python2.3/site-packages/roundup/cgi/client.py
in
inner_main(self=<_roundup_tracker_1.interfaces.Client
instance>)
  251         except:
  252             # everything else
  253             self.write(cgitb.html())
      self = <_roundup_tracker_1.interfaces.Client
instance>, global write = undefined, global cgitb =
<module 'roundup.cgi.cgitb' from
'/usr/local/pyt...b/python2.3/site-packages/roundup/cgi/cgitb.pyo'>,
html = undefined
  254 
  255     def clean_sessions(self):

 

Logged In: YES 
user_id=6405

Fixed in CVS, thanks! 
 
Patch attached.