The Pass Service plugin provides the possibility for non admin users to reset their password if it has been lost.
Copy passservice.jar into the plugins Directory of your openfire installation.
To configure the passservice plugin open the "password service" in the server settings dialog and enable the service. Here you have also the possibility to configure the token lifetime. The sender email address and also if the link in the email should point to the ssl port or not.
You get access to the passservice pages while opening the following link path-to-adminconsole/plugins/passservice/passservice. Here you can see a formular where you can enter the username and password. By pressing submit the information will be transmit to the server and checked. If everything is O.K. the server will generate a new token and send it via email to the given email address and present the status in the browser. The last step is to open the link in the email and the server will regenerate a new password and send it also per email to the user!. The token could only used once and will be deleted after usage!