DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.

Changing passwordFormat from Encrypted to Hashed / DNN.ActiveDirectory

 5 Replies
 0 Subscribed to this topic
 40 Subscribed to this forum
Sort:
Author
Messages
Veteran Member
Posts: 1182
Veteran Member
MVP
MVP
You're an MVP!

I have an installation of DNN that is running since November 2011 (DNN 6.1.0) and was upgraded frequently to 9.12.0 atm. The installation uses DNN.ActiveDirectory version 7.2.0 for Intranet authentication. Works fine.

When trying to change the password format from "Encrypted" (which was the "secure" option at the time of the first install) to "Hashed", the site stops working. I can't find anything in the logs, except that the server was restarted (which is normal when changing the web.config), and again after setting back to "Encrypted". Nothing in between...

I tried to do this with a clean installation, changing the passwordFormat to "Encrypted" before running the installer, adding some users, changing to "Hashed" - every user could log in without a problem.

I suspect that the AD Provider is the bad guy, but anyone here who has an idea how to solve this?

Happy DNNing!
Michael

 

Michael Tobisch
DNN★MVP

DNN Connect
Veteran Member
Posts: 360
Veteran Member
Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
MVP
MVP
You're an MVP!
I do not, but I am very interested in the answer! :)

David Poindexter


Creator:


Veteran Member
Posts: 1182
Veteran Member
MVP
MVP
You're an MVP!

The answer is: I am stupid.

When changing the passwordFormat to "Hashed", it is also necessary to change enablePasswordRetrieval to "false" (because of course it is not possible to retrieve passwords when they're hashed...). "true" was the default setting in DNN 6, and was changed to "false" as default when "Hashed" got the default passwordFormat. That explains the behaviour in my test (with the clean installation).

Has nothing to do with the AD Authentication Provider...

Happy DNNing!
Michael

Michael Tobisch
DNN★MVP

DNN Connect
Veteran Member
Posts: 360
Veteran Member
Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
MVP
MVP
You're an MVP!
Oh wow - great thing to keep in mind! Thanks for sharing your findings! By the way, I know a lot of people would be interested in a presentation on using DNN.ActiveDirectory. We have run across the need from time to time and have never gone down the rabbit hole to try and figure out this particular project. It is awesome to know there is an open source alternative. Do you think this is something you could present sometime for Southern Fried DNN? We could move our meeting time to accommodate your schedule (as long as it is not too too too early for us - haha).

David Poindexter


Creator:


Veteran Member
Posts: 1182
Veteran Member
MVP
MVP
You're an MVP!
Posted By David Poindexter on 2/29/2024 5:21 PM
Oh wow - great thing to keep in mind! Thanks for sharing your findings! By the way, I know a lot of people would be interested in a presentation on using DNN.ActiveDirectory. We have run across the need from time to time and have never gone down the rabbit hole to try and figure out this particular project. It is awesome to know there is an open source alternative. Do you think this is something you could present sometime for Southern Fried DNN? We could move our meeting time to accommodate your schedule (as long as it is not too too too early for us - haha).

David,

why not - would it be too late to discuss this at the DNN Connect conference in Switzerland this year? Will you be there?

Happy DNNing!
Michael

 

 

Michael Tobisch
DNN★MVP

DNN Connect
Veteran Member
Posts: 360
Veteran Member
Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
MVP
MVP
You're an MVP!
Posted By Michael Tobisch on 3/1/2024 2:08 AM
Posted By David Poindexter on 2/29/2024 5:21 PM
Oh wow - great thing to keep in mind! Thanks for sharing your findings! By the way, I know a lot of people would be interested in a presentation on using DNN.ActiveDirectory. We have run across the need from time to time and have never gone down the rabbit hole to try and figure out this particular project. It is awesome to know there is an open source alternative. Do you think this is something you could present sometime for Southern Fried DNN? We could move our meeting time to accommodate your schedule (as long as it is not too too too early for us - haha).

David,

why not - would it be too late to discuss this at the DNN Connect conference in Switzerland this year? Will you be there?

Happy DNNing!
Michael

 

 

 

Michael, I think this would not only be great for DNN Connect, but for Southern Fried DNN as well.  We kinda struggle to get people to commit to presenting, so any interest here would be great!  ;-)

 

David Poindexter


Creator:


These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy
  2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
  3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  5. No Flaming or Trolling.
  6. No Profanity, Racism, or Prejudice.
  7. Site Moderators have the final word on approving / removing a thread or post or comment.
  8. English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved