Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Noob question: Where do DNN store User Password and DetailsNoob question: Where do DNN store User Password and Details
Previous
 
Next
New Post
2/22/2006 12:46 AM
 

Hi, I dont know if I should post this here or somewhere else but... here we go....

I know that there's user table in DNN Database contains the user ID, username, First, Last, is super user, affiliateID and Email. But where is the pwd and other details (address, phone, etc) stored?

Thanks if you can help me with this....

 
New Post
2/22/2006 4:39 AM
 

Their stored in aspnet_membership. You can tie the userids in here across to the users table, by looking at aspnet_users. You will find the passwords are encrypted using the keys you have put in your web.config and the passwordsalt.

Cheers
Roger


DNN MVP
Events - Get the latest version - Upgrade now!!
Feedback 6.4.2 - Now available - Give it a go!
Find us on Codeplex - DNN Events, DNN Feedback
Requirements/Bugs - Please submit them on Codeplex
 
New Post
2/23/2006 10:32 PM
 

And is there anything we can do here to 'reset' the passwords via Enterprise Manager or similar Roger?  The reason I ask is last week I got 'logged out' of a new DNN 3.2.2 installation.  I'd only set the host and admin accounts up with new passwords, but I got logged out, and no matter what I did I couldn't get back in.   In the end I removed the DNN install, and the DB and reinstalled DNN.  This time I set up another SuperUser account and another Admin account.  Then today I have again been shut out of DNN and none of my passwords work.  Not for the Host/Admin or the two new accounts.  And to cap it, when you request the password to be sent through, the new SuperUser one comes through with ***** (like a Host password request) and the other admin account comes through blank.  Ie. there is NOTHING next to Password: in the password retrieval email.

It seems as I look for a solution to this that there are other user out there who are experiencing similar problems.  Is it not possible for the DNN development team (who are doing a great job btw) to configure the passwords in the standard User table, so if something like this happens we can at least access the DB via EM and manually change/add/edit them.  It would be nice to have the 'choice' to have the passwords encoded (understand the added security benefits here, but really, if someone's got access to your DB they can do damage without seeing your passwords) or not? 

Just a thought. Meanwhile, I'll keep looking for a solution so I don't have to rebuild my DNN app for the 3rd time and now have to re-enter all my site content from the last week.

If anyone has a solution to this password issue, that's a simple step by step, I'll 'love you forever' if you could post it

Thanks,

Reuben.


for info on our website DNN skinning, feel free to check out our website at: www.spwd.co.nz
 
New Post
2/23/2006 11:03 PM
 

OK, just been trawling through the web.config and found the following:


  <membership userIsOnlineTimeWindow="15">
   <providers>
    <add name="DNNSQLMembershipProvider"
     type="DotNetNuke.Security.Membership.DNNSQLMembershipProvider, DNNSQLMembershipProvider"
     connectionStringName="SiteSqlServer"
     enablePasswordRetrieval="true"
     enablePasswordReset="true"
     requiresQuestionAndAnswer="false"
     minRequiredPasswordLength="4"
     minRequiredNonalphanumericCharacters="0"
     requiresUniqueEmail="false"
     passwordFormat="Encrypted"
     applicationName="/"
     description="Stores and retrieves membership data from the local Microsoft SQL Server database" />
   </providers>
  </membership>

I wonder, does anyone know if it's possible to replace 'encrypted', and if so, with what, and if so, could I then go into the DB via EM and manually enter the passwords decrypted and they'd then work?

Ta, R.


for info on our website DNN skinning, feel free to check out our website at: www.spwd.co.nz
 
New Post
2/24/2006 2:00 PM
 

Good thread!

I too have been wrestling with this "encrypted password" issue, and related problems caused by the difficulty accessing an existing (populated) SQL database from a brand new install of DNN portal.

Would I be correct to assume that the encryption key/salt buried in the web.config can be saved and then inserted into the web.config of a subsequent portal? Would that solve the problem of accessing an existing database from a new, or additional, portal?

 

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Noob question: Where do DNN store User Password and DetailsNoob question: Where do DNN store User Password and Details


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out