Passwords do not work after upgrade?

Post here for help with installing or upgrading mojoPortal pre-compiled release packages. When posting in this forum, please provide all relevant details. You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

Post here for help with installation of mojoPortal pre-compiled release packages

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.

You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

This thread is closed to new posts. You must sign in to post in the forums.
11/21/2013 6:28:10 AM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: Passwords do not work after upgrade?

the steps must go in order, you cannot change their hashed passwords and you cannot do step 8 until after you reset the passwords as clear text

if you did not reset them to clear text and password recovery works then don't change them just tell everyone to use password recover which will reset the password for hashed since it cannot recover.

11/21/2013 6:44:00 AM
Lexer
Gravatar
Total Posts 83
View Posts

Re: Passwords do not work after upgrade?

Hi,

No all I have done so far is to setup the mail address and tested the password recovery(that works great).

Because​ I use hashed ​password I can simple ignore the exclamation next to the Security Advisor (machine key generation)?

So All I need to do now is simple to create and send a news letter that states the problem and calls the users to use the password recovery at next logon?

Can I be sure that the newsletter will be sent to AL users?

BestRegards
​

11/21/2013 6:49:03 AM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: Passwords do not work after upgrade?

no machine key is also used for cookies so it is still extremely important. as I said before someone can easily hack your site if they know your machine key

but it is not used as part of hashing like it is used for part of encrypting, so the passwords are not affected by machine key unless using encrypted

11/21/2013 6:50:20 AM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: Passwords do not work after upgrade?

because machine key is used for cookies, after you change it you will have to login again to get a new cookie, changing it should log you out

11/21/2013 7:17:11 AM
Lexer
Gravatar
Total Posts 83
View Posts

Re: Passwords do not work after upgrade?

Thanks,

The machineKey is now set t a generated value and the exclamation​ mark is gone. I can login with my account as usual.

So, now all I need to do is to build a newsletter within mojoportal that asks the users to use the password recovery function go get a working password?

Can I be sure that this newsletter is sent to everyone? There is no risk that users have manage to unsubscribe from the newsletter?

What I need is to force a mail on to all the users.

BestRegards

 

11/21/2013 12:20:07 PM
Joe Audette
Gravatar
Total Posts 18439
View Posts

Re: Passwords do not work after upgrade?

as I said previously

test the newsletter first by sending one edition to yourself as the only subscriber.

then you can subscribe all site members to it by clicking a button.

then when you send it it will go to all site members email addresses

the user who receives the mail can click the unsubscribe link but they will have received this message

keep in mind that the site members did not choose to subscribe to the newsletter so you could either delete the newsletter or unsubscribe everyone after the message has been sent or make your own decision whether you want to keep the newsletter around after that.

usually newsletter is a marketing tool but in this case it isn't really a marketing message that you are sending out, this is just using it because it is a convenient way to email all site member email addresses.

You must sign in to post in the forums. This thread is closed to new posts.