Security

Re: Beta 2 Simple Password issue

DotnetV2Geek — Thu, 01 Dec 2005 15:34:37 GMT

**** minRequiredNonAlphanumericCharacters="0" //the compiler is not recoginizing this attribute

minRequiredNonAlphanumericCharacters: this attribute accepts only integer value so it should be atleast 1

Re: Beta 2 Simple Password issue

John Spurlin — Wed, 02 Nov 2005 02:01:45 GMT

I am having the same issue. Here is what I have in web.config

</connectionStrings>

<system.web>

<add name="AspNetSqlProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.3600.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"

connectionStringName="LocalSqlServer"

enablePasswordRetrieval="true"

enablePasswordReset="true"

requiresQuestionAndAnswer="true"

minRequiredNonAlphanumericCharacters="0" //the compiler is not recoginizing this attribute

minRequiredPasswordLength="5"

passwordFormat="Encrypted"

maxInvalidPasswordAttempts="5"

passwordAttempWindow="10"

requiresUniqueEmail="true"

applicationName="/" />

</providers>

</membership>

I am just starting to work with membership. I am using the July CTP

Re: Beta 2 Simple Password issue

vimodi — Wed, 04 May 2005 16:59:45 GMT

I couldnt reproduce the problem on Beta2 build.

Its recommended to modify the application web.config then changing the machine.config.

So i modified the application web.config and membership provider section looks like.

</providers>

Re: Beta 2 Simple Password issue

shruti — Wed, 04 May 2005 07:18:43 GMT

I've the following setting in my mcahine.config file -

<add name="AspNetSqlMembershipProvider"

type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"

connectionStringName="LocalSqlServer"

enablePasswordRetrieval="false"

enablePasswordReset="false"

requiresQuestionAndAnswer="false"

applicationName="/"

requiresUniqueEmail="false"

passwordFormat="Hashed"

maxInvalidPasswordAttempts="5"

passwordAttemptWindow="10"

minRequiredPasswordLength="1"

minRequiredNonalphanumericCharacters ="0"

</providers>

</membership>

Now when i go to the Website Administration tool and click on CReate User - and enter the user details i get the following error -

An error was encountered. Please return to the previous page and try again.

The following message may help in diagnosing the problem: Exception has been thrown by the target of an invocation. at System.RuntimeMethodHandle._InvokeMethodFast(Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner) at System.RuntimeMethodHandle.InvokeMethodFast(Object target, Object[] arguments, SignatureStruct sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks) at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture) at System.Web.Administration.WebAdminMembershipProvider.CallWebAdminMembershipProviderHelperMethodOutParams(String methodName, Object[] parameters, Type[] paramTypes) at System.Web.Administration.WebAdminMembershipProvider.CreateUser(String username, String password, String email, String passwordQuestion, String passwordAnswer, Boolean isApproved, Object providerUserKey, MembershipCreateStatus& status) at System.Web.UI.WebControls.CreateUserWizard.AttemptCreateUser() at System.Web.UI.WebControls.CreateUserWizard.OnNextButtonClick(WizardNavigationEventArgs e) at System.Web.UI.WebControls.Wizard.OnBubbleEvent(Object source, EventArgs e) at System.Web.UI.WebControls.CreateUserWizard.OnBubbleEvent(Object source, EventArgs e) at System.Web.UI.WebControls.Wizard.WizardChildTable.OnBubbleEvent(Object source, EventArgs args) at System.Web.UI.Control.RaiseBubbleEvent(Object source, EventArgs args) at System.Web.UI.WebControls.Button.OnCommand(CommandEventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

can anyone help me with this .... where am i going wrong ?

Re: Beta 2 Simple Password issue

j_gaylord — Fri, 29 Apr 2005 16:39:31 GMT

Using his example, the password must be at least 4 characters long. Make sure that is the case. Also, make sure that the web.config file is in the root of your web. If you continue to have issues, post the web.config here.

Re: Beta 2 Simple Password issue

antecedents — Thu, 28 Apr 2005 01:26:53 GMT

Thank you everyone this has helped me lots!

Re: Beta 2 Simple Password issue

zubairdotnet — Wed, 27 Apr 2005 13:32:33 GMT

Hi,

Even though I added the above code in my web.config file under system.web, I still cannot create the user, it still asks me to "Please enter a different password"

Tell me whats wrong?

Zubair

Re: Beta 2 Simple Password issue

erossetto — Wed, 27 Apr 2005 05:58:01 GMT

In case anyone still have problems with this issue, I fixed it adding this:

        <membership defaultProvider="MyMembershipProvider">
            <providers>
                <add connectionStringName="LocalSqlServer" passwordAttemptWindow="10"
                enablePasswordRetrieval="false" enablePasswordReset="true" requiresQuestionAndAnswer="false"
                applicationName="/" requiresUniqueEmail="true" passwordFormat="Hashed"
                minRequiredPasswordLength="4" minRequiredNonalphanumericCharacters="0"
                passwordStrengthRegularExpression="" name="MyMembershipProvider"
                type="System.Web.Security.SqlMembershipProvider" />
            </providers>
        </membership>

Of course you can change the connectiongStringName to whatever you want to use... for a list of all the settings you can "tweak" check the public properties here:

http://msdn2.microsoft.com/library/zsza764d(en-us,vs.80).aspx

I guess this should good enough not to have to implement our own membership provider.

Re: Beta 2 Simple Password issue

j_gaylord — Tue, 26 Apr 2005 18:13:50 GMT

DannySmurf wrote:
Ahh, so I can't just use the default AspNetSqlMembershipProvider that's already in the config files. Didn't realize that. Thanks. :)

Yes you can. You would then just have to tweak the machine.config file in your ASP.NET folder under Windows. Just keep in mind that if you do tweak that, you must remember your settings or a future upgrade will get rid of them. Also, you don't need to create your own connection string. You can still use LocalSqlServer. Remember that machine.config loads first and then the web.config file.

chupajr wrote:
I have almost this exact code in my web.config, but for all the attributes, it says 'attribute not declared', and does not actually do anything. It loads without errors, but it doesn't actually apply any of the attributes.

It should apply your attributes just fine if you use this. The schema for the Membership provider has not been updated since Beta 1 so all of these attributes will have a blue squiggly line underneath. However, they will work if you run your app. See http://lab.msdn.microsoft.com/productfeedback/viewfeedback.aspx?feedbackid=d8f4663b-8fe4-4c23-8c0e-a961e7276e81 for more information.

Re: Beta 2 Simple Password issue

chupajr — Tue, 26 Apr 2005 16:29:57 GMT

j_gaylord wrote:

To resolve this issue, you will have to add a membership section to your web.config file. A sample web.config is shown below:

<code snipped>

I have almost this exact code in my web.config, but for all the attributes, it says 'attribute not declared', and does not actually do anything. It loads without errors, but it doesn't actually apply any of the attributes.

Re: Beta 2 Simple Password issue

DannySmurf — Thu, 21 Apr 2005 07:17:43 GMT

j_gaylord wrote:
To resolve this issue, you will have to add a membership section to your web.config file.

Ahh, so I can't just use the default AspNetSqlMembershipProvider that's already in the config files. Didn't realize that. Thanks. :)

Re: Beta 2 Simple Password issue

j_gaylord — Wed, 20 Apr 2005 16:13:46 GMT

LocalSqlServer is defined in the machine.config file and does not necessarily have to be defined again in the web.config.

Re: Beta 2 Simple Password issue

j_gaylord — Wed, 20 Apr 2005 16:12:37 GMT

DannySmurf wrote:
Erm... yes, I had that idea too. But when I do, I get:
Configuration Error

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: Attribute not recognized 'minRequiredNonAlphanumericCharacters'

To resolve this issue, you will have to add a membership section to your web.config file. A sample web.config is shown below:

<?xml version="1.0"?>

<system.web>

<add name="ISKSqlMembershipProvider"

type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a"

connectionStringName="LocalSqlServer"

enablePasswordRetrieval="false"

enablePasswordReset="true"

requiresQuestionAndAnswer="true"

applicationName="/"

requiresUniqueEmail="false"

passwordFormat="Hashed"

maxInvalidPasswordAttempts="5"

passwordAttemptWindow="10"

minRequiredPasswordLength="3"

minRequiredNonalphanumericCharacters="0"

passwordStrengthRegularExpression="" />

</providers>

</membership>

</system.web>

</configuration>

Re: Beta 2 Simple Password issue

sdix401k — Tue, 19 Apr 2005 23:01:45 GMT

Finally get a password with @123WeHP32. GEEEEEZE

Re: Beta 2 Simple Password issue

DannySmurf — Tue, 19 Apr 2005 20:31:08 GMT

markberr wrote:
You'll want to tweak these new attributes:

minRequiredPasswordLength (default value of 7)
minRequiredNonAlphanumericCharacters (default value of 1)

This posting is provided "AS IS" with no warranties, and confers no rights.

Erm... yes, I had that idea too. But when I do, I get:

Configuration Error

Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: Attribute not recognized 'minRequiredNonAlphanumericCharacters'