Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Reset / Retrieve PasswordReset / Retrieve Password
Previous
 
Next
New Post
6/26/2013 3:43 PM
 

On our login page, we have it set up for users to have their password e-mailed to them if they forget it - however, we are having a couple issues with functionality.

When we click "Reset Password" we get the following message:
"You can request your password by providing your User Name and the Password will be sent to the email address you provided during registration."

The user enters their username, then gets this message on the screen:
"If the user name you entered was correct, you should receive a new e-mail shortly with a link to reset your password."

1 - We want to set it up so that when they enter their e-mail, if it's not a registered one, a message will come up saying that, rather than having customers who think they're registered waiting to see if an e-mail comes.

2 - If the user is registered, they receive an e-mail containing their password, not a link to reset their password. so the message that comes up after they've requested it should say "your password has been sent", and not "...link to reset your password"

Please advise how we can change these settings, thank you.

 
New Post
8/15/2013 10:42 AM
 
If you want the password to be sent via email (not preferred due to security), you have to set in web.config - enablePasswordRetrieval="[true|false]".

Don't have an answer for your first point unless you probably change the code/process for retrieval that it checks the username/registered email. On the other hand, this should actually be a good security at your end as "valid users" knows their username/email they used during registration. Otherwise, they would potentially simply be suspicious... This is just my opinion.
 
New Post
8/16/2013 4:43 AM
 
there seem to be an issue in DNN 7.1 of sending out password reset messages in some cases instead of password mails, despite the enablePasswordRetrieval setting

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
8/17/2013 7:50 AM
 
if you are using hashing (which is the default since 7.1.0) then it is not possible to retrieve a password (e.g. for a password reminder mail), so we introduced the concept of password resets. As it didn't make sense to have 2 different systems that operate differently based on password storage format, and as sending emails out containing passwords are not a good idea (as smtp is cleartext), we elected to make password reset links the default.

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
8/24/2013 11:39 PM
 
Cathal, could you comment on Verification please - http://www.dnnsoftware.com/forums/forumid/108/postid/489732/scope/posts#489732

Entrepreneur

PokerDIY Tournament Manager - PokerDIY Tournament Manager<
PokerDIY Game Finder - Mobile Apps powered by DNN
PokerDIY - Connecting Poker Players

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Reset / Retrieve PasswordReset / Retrieve Password


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out