473,320 Members | 1,909 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,320 software developers and data experts.

Question about ChangePassword control

Hello,
I use in ChangePassword web control. The control is connected with a
Membership provider that I also has defined.
Particularly, there is such property in the provider:
MinRequiredPasswordLength

As far as I understood this property should control automatically length of
of new password that was inputed by user in the control. But it didn't do
it. For example, I defined MinRequiredPasswordLength=3, but I succeed to
input and change password of any length. So what is expected behavior of the
control? How should I use this property and others such as
maxInvalidPasswordAttempts and so on?

Thank you

Evgeny

Jan 28 '06 #1
2 3050
On Sat, 28 Jan 2006 14:06:28 +0200, "Evgeny" <ev******@bezeqint.net>
wrote:
Hello,
I use in ChangePassword web control. The control is connected with a
Membership provider that I also has defined.
Particularly, there is such property in the provider:
MinRequiredPasswordLength

As far as I understood this property should control automatically length of
of new password that was inputed by user in the control. But it didn't do
it. For example, I defined MinRequiredPasswordLength=3, but I succeed to
input and change password of any length. So what is expected behavior of the
control? How should I use this property and others such as
maxInvalidPasswordAttempts and so on?

Thank you

Evgeny


You will always be able to make passwords longer than what you have
set as the minimum. Were you able to set the password to less than
three characters?

Comment: A minimum password length of 3 would not be advisable. It
dramatically reduces the number of passwords possible (at that length)
and reduces an attacker's count of trial and error possibilities for
cracking your passwords (at that length).

Otis Mukinfus
http://www.otismukinfus.com
http://www.tomchilders.com
Jan 28 '06 #2
Exactly. This is the problem.
"Otis Mukinfus" <ph***@emailaddress.com> wrote in message
news:0m********************************@4ax.com...
On Sat, 28 Jan 2006 14:06:28 +0200, "Evgeny" <ev******@bezeqint.net>
wrote:
Hello,
I use in ChangePassword web control. The control is connected with a
Membership provider that I also has defined.
Particularly, there is such property in the provider:
MinRequiredPasswordLength

As far as I understood this property should control automatically length ofof new password that was inputed by user in the control. But it didn't do
it. For example, I defined MinRequiredPasswordLength=3, but I succeed to
input and change password of any length. So what is expected behavior of thecontrol? How should I use this property and others such as
maxInvalidPasswordAttempts and so on?

Thank you

Evgeny


You will always be able to make passwords longer than what you have
set as the minimum. Were you able to set the password to less than
three characters?

Comment: A minimum password length of 3 would not be advisable. It
dramatically reduces the number of passwords possible (at that length)
and reduces an attacker's count of trial and error possibilities for
cracking your passwords (at that length).

Otis Mukinfus
http://www.otismukinfus.com
http://www.tomchilders.com

Jan 28 '06 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

2
by: Blake | last post by:
Windows 2000 Active Directory, IIS 5 ASP code looks like this: Set oUser = GetObject("WinNT://DOMAIN/" & strNTName) oUser.ChangePassword strPassword, strNewPassword If (err.number <> 0)...
1
by: javatopia | last post by:
Hello! I have a web page named "ChangePassword.aspx", which works just wonderful on my developer machine. When I deploy it to the server, though, I get: Compiler Error Message: CS0030: Cannot...
1
by: chris | last post by:
I need to force a user to a ChangePassword screen after they have requested there password. I am using a custom MembershipProvider and overriding the Validate user event. After the user has been...
1
by: nick | last post by:
I enable the administrators role to change password of other logins. Should I use asp:ChangePassword? It seems it's used to change current logon's password?
0
by: davidr | last post by:
Hi, I am having a weird problem with the change password control. Unlike the createwizard control that creates new users and passwords, the changepassword control has no way of setting the...
1
by: PJ6 | last post by:
Setting e.Cancel = true on the ChangingPassword event, fired from a ChangePassword control, does not show its failure message. Do I have to use a MembershipProvider, or is there a way to simply...
2
by: Ken Fine | last post by:
I want to add the security question and answer security feature to the ChangePassword control. I am aware that this functionality is built into the PasswordRecovery tool. I have implemented the...
0
by: Jeff | last post by:
hi I've added the markup below in the ChangePasswordTemplate, I thought that when I hit the ImageButton the password would change, but nothing happpens. Even RequiredFieldValidators isn't...
1
by: Jeff | last post by:
hi asp.net 2.0 Here is the ChangePassword control markup on my webpage. The problem is that when I click the Submit button nothing happens (except that the textfields in the ChangePassword...
0
by: DolphinDB | last post by:
The formulas of 101 quantitative trading alphas used by WorldQuant were presented in the paper 101 Formulaic Alphas. However, some formulas are complex, leading to challenges in calculation. Take...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
0
by: CloudSolutions | last post by:
Introduction: For many beginners and individual users, requiring a credit card and email registration may pose a barrier when starting to use cloud servers. However, some cloud server providers now...
0
by: af34tf | last post by:
Hi Guys, I have a domain whose name is BytesLimited.com, and I want to sell it. Does anyone know about platforms that allow me to list my domain in auction for free. Thank you
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.