Products

Evoq Content Overview Content Creation Workflow Asset Management Mobile Responsive Personalization Content Analytics SEO Integrations Security Website PerformanceEvoq Engage Overview Community Management  Dashboard  Analytics  Member Profile Gamification Advocate Marketing Community Engagement  Ideas  Answers  Discussions  Groups  Wikis  Events Mobile ReadyDNN Support PackagesEvoq: CMS FeaturesEvoq OnDemandCompare DNN's CMS Products

Solutions

Content Management SystemMulti-Channel PublishingDigital MarketingOnline Community ManagementIntranet Software SolutionOur CustomersPrime

Resources

Test DrivesSchedule A DemoDocumentation CenterWebinarsWhite PapersProduct ManualsRequest PricingData SheetsCase StudiesEvoq Preferred Products Content Management Ecommerce Forms Identity Management and Authentication Site Management Social Themes

Partners

DNN Partners Partner Directory Become a DNN Partner Partner Program Overview  Hosting  Implementation  ISV  Training  Competencies

Community

Participate Ask a Question Forums Community Showcase DNN MVP  Program Overview  Lifetime MVPs  Honorary MVPs Subscribe to DNN Digest Advisory Groups  Awareness Advisory Group  Developer Advisory Group  Partner Advisory Group  Technology Advisory GroupLearn Documentation Wiki Community Blog Video Library Project History Development RoadmapDownload DNN Store Language Packs Manuals Nightly BuildsSecurity Policies Security Center

About

News Press Releases News Coverage Press KitCareersContact DNN

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Configuring for Strong Password UsageConfiguring for Strong Password Usage
Previous
 
Next
New Post
4/2/2007 3:35 PM
 
Joe Terhune

Joined: 5/9/2005
Posts: 7
Let’s suppose you have version Dnn 4.x installed and you want to force users to use strong passwords when registering and you want to modify the login attempt threshold to a number other than the default of 5 attempts. I looked everywhere in the Dotnetnuke documentation and searched the forums, but couldn’t find anything. The webconfig file has a comment for passwordAttemptThreshold but when I added this to the AspNetSqlMembershipProvider key I discovered it wasn’t supported.
After a bit of research I discovered the solution.  
To change the passwordAttemptThreshold add the maxInvalidPasswordAttempts attribute to the AspNetSqlMembershipProvider key and use the passwordStrengthRegularExpression attribute with a regular expression of choice to strengthen passwords.
 
Here is an example of a config setting that will change the maximum loggin attempts to three and will require that password contain at least one uppercase letter, one lowercase letter, and one number. The minimum password length is also set to 7.
Hope this helps.
 
<add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" maxInvalidPasswordAttempts="3" passwordStrengthRegularExpression="^(?=.*\d)(?=.*[a-z])(?=.*[A-Z]).{4,8}$" connectionStringName="SiteSqlServer" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="0" requiresUniqueEmail="false" passwordFormat="Encrypted" applicationName="DotNetNuke" description="Stores and retrieves membership data from the local Microsoft SQL Server database"/>
 
 
 
New Post
4/19/2007 5:00 PM
 
Leith Tussing


Joined: 2/14/2006
Posts: 45

This is exactly what I was jsut looking for, thank you for this valuable information.
 
New Post
5/9/2007 11:20 PM
 
NamoGuy

Joined: 12/19/2006
Posts: 21

You seem like you have already put alot of work in to this. I am needing to make a change but it will not work.

I need change the minRequiredPasswordLength="7" to minRequiredPasswordLength="4"

I am using Active Directory and that works with my other domain accounts but when I change it I get an error message twice...

Any ideas? 

Login Failed, remember that Passwords are case sensitive

Login Failed, remember that Passwords are case sensitive

 
New Post
8/24/2007 4:14 PM
 
James Restucci


axcess.us
Joined: 4/27/2006
Posts: 3

Same problem here.  Changing it to "4" in the web.config does nothing.  Anybody?
 
New Post
8/24/2007 4:27 PM
 
James Restucci


axcess.us
Joined: 4/27/2006
Posts: 3

okay, I figured it out.  You can't change it in the web.config by editing the config file.  In the config file the minRequiredPasswordLength field shows ="int" if you change it to say "4" and restart IIS it doesn't change.  However if you go into IIS Manager and edit the web.config from the ASP.NET --> Authentication --> Manage Providers - you may edit it there, and restart IIS and it works like a dream.

HTH
 
 Page 1 of 2
12Next 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Configuring for Strong Password UsageConfiguring for Strong Password Usage


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out