Recover/Reset password behavior

This is the place to report bugs and get support. When posting in this forum, please always provide as much detail as possible.

Please do not report problems with a custom build or custom code in this forum. If you are producing your own build from the source code and have problems or questions, ask in the developer forum, do not report it as a bug.

This is the place to report bugs and get support

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

What operating system were you running when the bug appeared?
What database platform is your site using?
What version of mojoPortal are you running?
What version of .NET do you use?
What steps are necessary to reproduce the issue? Compare expected results vs actual results.

This thread is closed to new posts. You must sign in to post in the forums.

11/4/2008 1:37:31 PM

dadkind

Total Posts 11

View Posts

Recover/Reset password behavior

On our site we are hashing the passwords and so they can not be retrieved. We also have the "Allow Password Retrieval" set to "NO".

However, I don't see how a user can recover/reset a forgotten password.

If I set "Allow Retrieval" to "YES", then I get an error that states "We were unable to access your information. Please try again. " (presumably because the password is hashed). But if I leave "Allow Retrival" to "OFF", then there is no mechanism by which the user can reset their password.

I need to be able to let users reset a forgotten password. How should this be accomplished?

Thanks,
-tomas

11/5/2008 7:36:34 AM

Joe Audette

Total Posts 18439

View Posts

Re: Recover/Reset password behavior

Hi Tomas,

I looked into this and the best that I can determine is that I never implemented this feature, only the setting for it. I'm sure I had it on my priority list at some point but over time it drifted off my radar because I'm not using hashed passwords on sites I manage.

I've added it again to my to do list, but honestly its not my top priority, I'll try to get to it in the next month or 2, but I'm not going to let it divert me from things I'm already focused on.

If you or your company need it urgently and would be willing to sponsor development (I estimate development and testing at 20 hours and would give you an open source sponsorship rate of $45/hour = $900), then I would be willing to switch gears and give it top priority.

Best,

Joe

11/5/2008 9:54:05 AM

dadkind

Total Posts 11

View Posts

Re: Recover/Reset password behavior

Thanks for the info.

At least now I know that I'm not just overlooking something! :-)

I will implement a workaround for the time being.

-tomas

11/5/2008 1:07:26 PM

dadkind

Total Posts 11

View Posts

Re: Recover/Reset password behavior

In order to start testing things I've reset some site settngs but am running into some other problems.

I've reset the passwords to clear text (the passwords were updated in the test DB and the new logins work as expected).

I've set the "Allow Password Retrieval" to "TRUE" and
I've set "Requires Question and Answer" to "TRUE" and
I've set "Allow Password Reset" to "TRUE"

But if I go to the RecoverPassword page and enter my email address I get the "We were unable to access your information. Please try again" error.

To dig a little deeper I added a default asp:PasswordRecover control on the page. When I try to use the second PasswordRecovery control I get this error message:"Your attempt to retrieve your password was not successful. Please try again".

In the debugger, I can see that the mojoMembershipProvider.GetUser() function gets called but no others.

Any clues on why I can't retrieve/reset a ClearText password?

-tomas

11/5/2008 1:15:28 PM

dadkind

Total Posts 11

View Posts

Re: Recover/Reset password behavior

Nevermind.

My "test" account had not yet set the "Password Question" and "Password Answer" so the "Requires Question And Answer" property was probably mucking things up.

An account with these properties set worked just fine.

-tomas

You must sign in to post in the forums. This thread is closed to new posts.