Security

Re: Configure passwordFormat="Encrypted"

mattgroves — Mon, 08 Jan 2007 05:29:17 GMT

Thankyou MorningZ,

This post helped solved the problem! =o)

Cheers,

Matt

Re: Configure passwordFormat="Encrypted"

Botnet — Thu, 06 Jul 2006 20:32:31 GMT

I don't know if this help, but it worked for me. If the user already exist the information about that user is stored in the default format, hashed. You must delete the user and create it again.

Alberto Botero

Re: Configure passwordFormat="Encrypted"

juliaw — Wed, 28 Jun 2006 14:18:38 GMT

I havehad the same problem, followed what you have done, but when I use the <asp:passwordrecovery > tag my email still contains the password encrypted - what am I doing wrong?

I would appreciate it is anyone could help

my web.config file, along with other stuff, contains this:

membership defaultProvider="AspNetSqlMembershipProvider"

userIsOnlineTimeWindow="15" hashAlgorithmType="">

providers>

clear />

add name="AspNetSqlMembershipProvider"

type="System.Web.Security.SqlMembershipProvider, System.Web,

Version=2.0.3600.0, Culture=neutral,

PublicKeyToken=b03f5f7f11d50a3a

connectionStringName="LocalSqlServer" enablePasswordRetrieval="false"

enablePasswordReset="true" requiresUniqueEmail="false"

passwordFormat="Encrypted" />

providers>

membership>

profile>

providers>

remove name="AspNetSqlProfileProvider" />

add name="AspNetSqlProfileProvider"

connectionStringName="LocalSQLServer"

applicationName="/"

type="System.Web.Profile.SqlProfileProvider,

System.Web, Version=2.0.0.0, Culture=neutral,

PublicKeyToken=b03f5f7f11d50a3a

" />

providers>

profile>

roleManager enabled="true">

providers>

remove name="AspNetSqlRoleProvider" />

add name="AspNetSqlRoleProvider"

connectionStringName="LocalSQLServer"

applicationName="/"

type="System.Web.Security.SqlRoleProvider,

System.Web, Version=2.0.0.0, Culture=neutral,

PublicKeyToken=b03f5f7f11d50a3a

" />

providers>

roleManager>

machineKey validationKey='DB3ED847DCE5791AC0CB6846A6333B618725DC292360101120'

decryptionKey='AC377ECCA35F6769654EFA2F9F' validation='SHA1'/>

Thanks in anticipation

Re: Configure passwordFormat="Encrypted"

Mike Hildner — Thu, 18 May 2006 21:15:33 GMT

Thanks MorningZ, you rock. Tthat did the trick. Adding the machineKey, that is. Doesn't seem to make a difference whether I use "clear" or "remove name" - either way works.

Thanks,

Mike

Re: Configure passwordFormat="Encrypted"

MorningZ — Thu, 18 May 2006 20:57:20 GMT

All right, exactly what I wanted to see..... compare it to a working Web.Config i have with fully working retrievable passwords

So what i'd suggest, and this is only because i can tell you the above works, is replace <clear /> with the <remove name="...." />

And another thing I remember is that you have to set a "validationKey" and "decryptionKey" in Web.Config as well (sorry this block won't work, i had to change some of the values so i am not posting our encryption keys). This node is a child of <system.web>

I used some "ADAM generator" to generate those keys

Oooohh.. i still had bookarked the blog post where i learned that
http://weblogs.asp.net/owscott/archive/2005/05/11/406550.aspx

the link to the program i used is in the very last comment

Re: Configure passwordFormat="Encrypted"

Mike Hildner — Thu, 18 May 2006 20:25:31 GMT

Sure, thanks for taking a look. I fiddled with some other attributes.

membership>

providers>

clear/>

add name="AspNetSqlMembershipProvider"

connectionStringName="LocalSqlServer"

enablePasswordRetrieval="true"

enablePasswordReset="true"

requiresQuestionAndAnswer="false"

applicationName="/"

requiresUniqueEmail="false"

passwordFormat="Encrypted"

maxInvalidPasswordAttempts="5"

minRequiredPasswordLength="4"

minRequiredNonalphanumericCharacters="0"

passwordAttemptWindow="10"

passwordStrengthRegularExpression=""

type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"/>

providers>

membership>

Re: Configure passwordFormat="Encrypted"

MorningZ — Thu, 18 May 2006 20:00:48 GMT

Mike Hildner:
I assume I'm missing some configuration.

Can you show what you currently have in your Web.Config for that section?

Configure passwordFormat="Encrypted"

Mike Hildner — Thu, 18 May 2006 17:05:52 GMT

Hi,

I'd like to use passwordFormat="Encrypted", but am receiving the below exception when I try to create a new user. All I did was change from "Hashed" to "Encrypted". I assume I'm missing some configuration. Can anyone explain how to get this working or point me to a resource that explains it?

Thanks,

Mike

Exception has been thrown by the target of an invocation. at System.RuntimeMethodHandle._InvokeMethodFast(Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner) at System.RuntimeMethodHandle.InvokeMethodFast(Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Web.Administration.WebAdminMembershipProvider.CallWebAdminMembershipProviderHelperMethodOutParams(String methodName, Object[] parameters, Type[] paramTypes) at System.Web.Administration.WebAdminMembershipProvider.CreateUser(String username, String password, String email, String passwordQuestion, String passwordAnswer, Boolean isApproved, Object providerUserKey, MembershipCreateStatus& status) at System.Web.UI.WebControls.CreateUserWizard.AttemptCreateUser() at System.Web.UI.WebControls.CreateUserWizard.OnNextButtonClick(WizardNavigationEventArgs e) at System.Web.UI.WebControls.Wizard.OnBubbleEvent(Object source, EventArgs e) at System.Web.UI.WebControls.CreateUserWizard.OnBubbleEvent(Object source, EventArgs e) at System.Web.UI.WebControls.Wizard.WizardChildTable.OnBubbleEvent(Object source, EventArgs args) at System.Web.UI.Control.RaiseBubbleEvent(Object source, EventArgs args) at System.Web.UI.WebControls.Button.OnCommand(CommandEventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)