Aristotle
05-09-2006, 09:53 AM
It's actually sending you a new random password, since the membership provider stores passwords in the database as non-reversible Hashed by default. You can configure the membership provider to store passwords in the database in Clear or Encrypted instead.
The default membership provider looks like this:
[quote]
<membership>
<providers>
<addname='AspNetSqlMembershipProvider'
type='System.Web.Security.SqlMembershipProvider,Sy stem.Web,Version=2.0.0.0,Culture=neutral,PublicKey Token=b03f5f7f11d50a3a'
connectionStringName='LocalSqlServer'
enablePasswordRetrieval='false'
enablePasswordReset='true'
requiresQuestionAndAnswer='true'
applicationName='/'
requiresUniqueEmail='false'
passwordFormat='Hashed'
maxInvalidPasswordAttempts='5'
minRequiredPasswordLength='7'
minRequiredNonalphanumericCharacters='1'
passwordAttemptWindow='10'
passwordStrengthRegularExpression=''/>
</providers>
</membership>
</CODE>
You will need to change the following:
enablePasswordRetrieval='true'
passwordFormat='Clear' - or 'Encrypted' if you configured your own machineKey element, which is for another discussion.
and remove then re-add the provider like below...
[quote]
<membership>
<providers>
<removename='AspNetSqlMembershipProvider'/>
<addname='AspNetSqlMembershipProvider'
type='System.Web.Security.SqlMembershipProvider,Sy stem.Web,Version=2.0.0.0,Culture=neutral,PublicKey Token=b03f5f7f11d50a3a'
connectionStringName='LocalSqlServer'
enablePasswordRetrieval='true'
enablePasswordReset='true'
requiresQuestionAndAnswer='true'
applicationName='/'
requiresUniqueEmail='false'
passwordFormat='Clear'
maxInvalidPasswordAttempts='5'
minRequiredPasswordLength='7'
minRequiredNonalphanumericCharacters='1'
passwordAttemptWindow='10'
passwordStrengthRegularExpression=''/>
</providers>
</membership>
</CODE>
You'll probably have to recreate all your users so that their password format is updated in the database.
Aristotle
DiscountASP.NET
www.DiscountASP.NET (http://www.DiscountASP.NET)
The default membership provider looks like this:
[quote]
<membership>
<providers>
<addname='AspNetSqlMembershipProvider'
type='System.Web.Security.SqlMembershipProvider,Sy stem.Web,Version=2.0.0.0,Culture=neutral,PublicKey Token=b03f5f7f11d50a3a'
connectionStringName='LocalSqlServer'
enablePasswordRetrieval='false'
enablePasswordReset='true'
requiresQuestionAndAnswer='true'
applicationName='/'
requiresUniqueEmail='false'
passwordFormat='Hashed'
maxInvalidPasswordAttempts='5'
minRequiredPasswordLength='7'
minRequiredNonalphanumericCharacters='1'
passwordAttemptWindow='10'
passwordStrengthRegularExpression=''/>
</providers>
</membership>
</CODE>
You will need to change the following:
enablePasswordRetrieval='true'
passwordFormat='Clear' - or 'Encrypted' if you configured your own machineKey element, which is for another discussion.
and remove then re-add the provider like below...
[quote]
<membership>
<providers>
<removename='AspNetSqlMembershipProvider'/>
<addname='AspNetSqlMembershipProvider'
type='System.Web.Security.SqlMembershipProvider,Sy stem.Web,Version=2.0.0.0,Culture=neutral,PublicKey Token=b03f5f7f11d50a3a'
connectionStringName='LocalSqlServer'
enablePasswordRetrieval='true'
enablePasswordReset='true'
requiresQuestionAndAnswer='true'
applicationName='/'
requiresUniqueEmail='false'
passwordFormat='Clear'
maxInvalidPasswordAttempts='5'
minRequiredPasswordLength='7'
minRequiredNonalphanumericCharacters='1'
passwordAttemptWindow='10'
passwordStrengthRegularExpression=''/>
</providers>
</membership>
</CODE>
You'll probably have to recreate all your users so that their password format is updated in the database.
Aristotle
DiscountASP.NET
www.DiscountASP.NET (http://www.DiscountASP.NET)