Child site users receive an expired link when attempting to reset password.
A user with a record in the parent site may log into a child site with the same credentials.
Resetting a forgotten password works fine from the parent site.
The reset link sent when requesting it from the child site is always expired.
Changing the domain in the reset link to the parent domain works, however.