Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Changin passwordFormat for existing usersChangin passwordFormat for existing users
Previous
 
Next
New Post
9/30/2013 11:04 AM
 
Hello,
since I prefer to use passwordFormat="Encrypted" instead of "Hashed" DNN7 default, I need to change each user password format, otherwise when I try to change a user password, I got this error:

There was an error setting the password. The password has not been changed.

an exception is thrown:

DotNetNuke.Modules.Admin.Users.Password - System.Configuration.Provider.ProviderException: Hashed passwords cannot be decoded.
at System.Web.Security.SqlMembershipProvider.UnEncodePassword(String pass, Int32 passwordFormat)
at System.Web.Security.SqlMembershipProvider.GetPassword(String username, String passwordAnswer)
at WebMatrix.WebData.SimpleMembershipProvider.GetPassword(String username, String answer)
at System.Web.Security.MembershipUser.GetPassword()
at DotNetNuke.Security.Membership.AspNetMembershipProvider.ChangePassword(UserInfo user, String oldPassword, String newPassword)
at DotNetNuke.Entities.Users.UserController.ChangePassword(UserInfo user, String oldPassword, String newPassword)
at DotNetNuke.Modules.Admin.Users.Password.cmdUpdate_Click(Object sender, EventArgs e)

The users created AFTER the passwordFormat change, have no issue in password change.

Does anyone knows how to change password format for each existing user?

Thanks
 
New Post
10/3/2013 4:24 PM
 
what version are you running? Whilst encrypted/hashed for users works fine, we had to make a fix to support the use case where an admin sets a users password (i.e. in the case of a hashed password it's difficult to compare the "old" password value) and this change was only made in 7.1.2

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
New Post
10/4/2013 3:00 AM
 

Hi cathal,

when I wrote the post, I had new install of 7.1.1. And I wrote a script in order to convert to encrypt format for each user. Now, I deleted instance and installed 7.1.2. My suprise has been that in this case the token for password reset does not work. The page says that there is no corrispondence between user and token, or token is expired. But I have seen in sql tables that expiration date is 24 hours after token creation and the username is written correctly.

 ...very confused.

 
New Post
10/4/2013 6:27 AM
 
that's odd - the password reset page simply looks for a matching resettoken and ensures that it is still valid so as long as you are using the same value for a user that is stored in PasswordResetToken and the PasswordResetExpiration value is in the future it should work i.e. there is no check for existing password

Buy the new Professional DNN7: Open Source .NET CMS Platform book Amazon US
 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Changin passwordFormat for existing usersChangin passwordFormat for existing users


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out