Microsoft Solution for Hosted Exchange

Re: Strange password reset behavior in the Control Panel

jasonjoh — Thu, 29 Jun 2006 15:47:54 GMT

Thanks for verifying this! I posted a bit more details and guidance on correcting the problem here:

http://blogs.msdn.com/jasonjoh/archive/2006/06/29/650822.aspx

Re: Strange password reset behavior in the Control Panel

dfrauzel — Wed, 28 Jun 2006 18:20:41 GMT

Similar findings at this thread: http://forums.asp.net/thread/1179816.aspx

Rebuilding CorePlugins.dll is the solution. Anyone can do this using freely available tools, such as SharpDevelop (or the "free as in beer" version of MSVC#), but as a convenience I've posted a link to a working CorePlugins.dll for download in the thread above, if you're okay with downloading a DLL for your production system from an unknown source.

Re: Strange password reset behavior in the Control Panel

owenp — Tue, 27 Jun 2006 13:08:44 GMT

I'm having the same issue now as reported above - but after reading all of the posts - I did not glem a resolution? By rebuilding the CorePlugins project, what was that?

Re: Strange password reset behavior in the Control Panel

jasonjoh — Wed, 07 Jun 2006 19:15:30 GMT

Yep, I had this exact same problem. Here's the weird thing: I rebuilt the CorePlugins project that comes with the Sample CP and the problem went away.

Basically the idea is that if the authenticated user is trying to change his own password, he should see the 3 textbox UI for ChangeUserPassword. This should happen for ALL users, even admins.

If the authenticated user is trying to change someone else's password, then they should get the 2 textbox UI for SetUserPassword. The code looked right to me (look at the Page_Load function in ChangePassword.ascx.cs) so all I did was add some trace statements to print out the LDAP paths so I could see what data we were working with! And yes, I took them back out and it still worked fine.

I'm not sure what happened, but it would appear that the binary CorePlugins.dll that ships with the sample is corrupted or was built with old code.

Re: Strange password reset behavior in the Control Panel

Ilya_f — Wed, 07 Jun 2006 16:16:08 GMT

I make some investigations. I start MPF Trace tool and try to change password logged as standard and after – as organization admin.

Little quote from trace:

Standard user try to change his password:

machine MPSSQL01

namespace Hosted Exchange

procedure SetUserPassword

Organization admin try to change his own password:

machine MPSSQL01

namespace Hosted Exchange

procedure ChangeUserPassword

I seems that Sample CP use reset password (SetUserPassword) instead of change password (ChangeUserPassword) procedure when standard user try to change his own password. Sample CP shows only “New Password” and “Confirm Password” fields.

However Sample CP use ChangeUserPassword procedure and shows “Old Password” field when business organization admin try to change his own password.

It seems that problem is in Sample CP? How to force it use ChangeUserPassword procedure when standard user change his own password?

Thank you,

Ilya.

Re: Strange password reset behavior in the Control Panel

Ilya_f — Wed, 07 Jun 2006 15:36:31 GMT

Sorry. Forgot to say that I use Samle CP.

Re: Strange password reset behavior in the Control Panel

Ilya_f — Wed, 07 Jun 2006 15:34:38 GMT

Exactly the same problem. Could anybody solve it? I use HMC3.5 FP1 Consolidated Server.

Thank you.

Ilya.

Re: Strange password reset behavior in the Control Panel

coolhand33 — Fri, 12 May 2006 15:07:45 GMT

I'm guessing you haven't found anything out about this yet. Would it be crazy to try and reinstall the sample cp? I've really got to get this figured out.

Thanks.

Re: Strange password reset behavior in the Control Panel

coolhand33 — Mon, 01 May 2006 15:43:12 GMT

I am not aware of any changes (although obviously something had to change). That is why I am so dumbfounded.

Here are the log entries for the various cases:

Administrator changing his own password:

2006-05-01 15:27:49 W3SVC1 x.x.x.x POST /Control/logon.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 302 0 0
2006-05-01 15:27:49 W3SVC1 x.x.x.x GET /Control/Browser.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2006-05-01 15:27:52 W3SVC1 x.x.x.x POST /Control/Browser.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 302 0 0
2006-05-01 15:27:52 W3SVC1 x.x.x.x GET /Control/Account.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2006-05-01 15:27:54 W3SVC1 x.x.x.x GET /Control/Account.aspx mid=5 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0

Administrator changing other user's password:

2006-05-01 15:30:28 W3SVC1 x.x.x.x POST /Control/logon.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 302 0 0
2006-05-01 15:30:28 W3SVC1 x.x.x.x GET /Control/Browser.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2006-05-01 15:30:30 W3SVC1 x.x.x.x POST /Control/Browser.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 302 0 0
2006-05-01 15:30:30 W3SVC1 x.x.x.x GET /Control/Account.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2006-05-01 15:30:32 W3SVC1 x.x.x.x GET /Control/Account.aspx mid=5 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0

User changing own password:

2006-05-01 15:30:28 W3SVC1 x.x.x.x POST /Control/logon.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 302 0 0
2006-05-01 15:30:28 W3SVC1 x.x.x.x GET /Control/Browser.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0
2006-05-01 15:30:30 W3SVC1 x.x.x.x POST /Control/Browser.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 302 0 0
2006-05-01 15:30:30 W3SVC1 x.x.x.x GET /Control/Account.aspx - 443 - x.x.x.x Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727) 200 0 0

Oddly enough I found that the admin COULD change his own password this morning. But once I changed it, I couldn't change it to something else again. Now I'm back to the original error. At least he is not getting the proper 3 field screen when trying to change his own password. Users, however, are still getting the improper 2 field screen for password resets.

Thanks.

Re: Strange password reset behavior in the Control Panel

jjstreic — Fri, 28 Apr 2006 19:57:24 GMT

I am actually working to reproduce your issue on my lab setup, but you should also be able to determine the URL from the IIS logs.

What changed when this stopped working?

Thanks

Re: Strange password reset behavior in the Control Panel

coolhand33 — Thu, 27 Apr 2006 15:07:51 GMT

Ok. Thanks for your help. Let me know if you figure something out. In the meantime, I apologize but I do not know how to do a network trace to determine the URL. Can someone help me with that?

Thanks.

Re: Strange password reset behavior in the Control Panel

jjstreic — Tue, 25 Apr 2006 21:15:46 GMT

You can do a network trace and find the URL from there. Let me do some more research here and I'll get back to you.

Thanks

Re: Strange password reset behavior in the Control Panel

coolhand33 — Fri, 21 Apr 2006 17:47:25 GMT

Sorry, I've been away for awhile.

I would not know how to access the pages directly because the URL for the two field and three field screens both seems to be http://domain.com/control/account.aspx?mid=5.

Thanks.

Re: Strange password reset behavior in the Control Panel

jjstreic — Mon, 27 Mar 2006 21:54:59 GMT

Hmm, I have not seen this error before. Can you access the pages directly?

Thanks

Strange password reset behavior in the Control Panel

coolhand33 — Fri, 24 Mar 2006 15:22:37 GMT

Hi,

I'm having some weird control panel problems. I can tell you that this was working fine 3 days ago. I have not changed anything that I am aware of that should have caused this problem.

1. When a non-admin user logs into the control panel to change their password, they no longer get the page with three fields (old password, new password, confirm password). They get the page for administrators with two fields (new password, confirm password). When they try to change their password, they get an access denied message.

2. When an admin logs in to the control panel and chooses to reset a user's password, he gets the two field page like he is supposed to. Everything works, there is no problem. However, when he chooses to reset the password for his own account, he gets the three field page. When filling out the fields and submitting, he gets an error, 'A constraint violation occurred.'

I know from first-hand experience that the user should always get the three field page, and the admin should always get the two field page (even when changing his own password).

Does anyone have any idea what happened?

Thanks.
Marcus