Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Upgrade to 7.1.1 - User login 'Requires' password reset?Upgrade to 7.1.1 - User login 'Requires' password reset?
Previous
 
Next
New Post
12/5/2013 9:14 PM
 
After upgrading to 7.1.1 Platform from 6.2.6 Community Edition our users are being forced to reset their passwords. Is this an intended behavior? 

Is there a way to disable this requirement?

I am normally a proponent of password changing common practices, but we have 275+ users and I feel confident in saying this is going to cause a lot 

of issues for 75% of our users.
 
New Post
12/6/2013 3:08 AM
 
it depends on you password settings, whether users need to reset their password. Especially, if you switched from encrypted to hashed, users have to reset their password and should add secret question and answer.

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
12/6/2013 8:18 AM
 
So changing this  passwordFormat="Hashed" to this passwordFormat="Encrypted"  in the web.config file should solve my issue?
 
New Post
12/6/2013 8:55 AM
 

Users are not forced to reset their passwords on upgrade, if that is happening there is an error somewhere. I suspect what you mean is that when users forget their password they can no longer get an email with the password, instead they get a password reset link? If so, then there is no configuration to change this - as a security measure we decided to stop sending passwords out.

Note: If you choose to use encrypted passwords then the password can be retrieved (it cant if they're hashed), so you could amend the system message that sends the email and use the token i.e.

locate

EMAIL_PASSWORD_REMINDER_BODY and EMAIL_USER_REGISTRATION_PUBLIC_BODY text and edit it to use the old Password token

Your password is: [Membership:Password]


Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
12/6/2013 9:24 AM
 

No, users logging into the new site are required to reset their passwords.

I have my production site DNN6.2.6 and I have my upgraded site DNN7.1.1 (which after testing I will switch my dns settings and make it live). I have a list of usernames and passwords (I know I know this is bad, but when you have a group of users that find password reminders and resets confusing and more trouble...I digress)

On the live 6.2.6 site I can login with user: johnDoe32x and password: super$ecretPw but when attempt this on the new 7.1.1 site I get a Login Failed. Please remember that passwords are case sensitive.

Cathal, could elaborate on the second part of your response? Where and how might one do this? My one thought is to change the email reminder to myself and few others in our group and give each a list of users to reset the password and then rollback the email reminder.

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Upgrade to 7.1.1 - User login 'Requires' password reset?Upgrade to 7.1.1 - User login 'Requires' password reset?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out