понедельник, 3 августа 2009 г.

Over-riding password format in web.config

Incase someone needs it. Here is how i changed default password format, Hashed to Encrypted.

<membership>

<providers>

<remove name="AspNetSqlMembershipProvider"/> --- * need it to override default

<add name="AspNetSqlMembershipProvider"

type="System.Web.Security.SqlMembershipProvider,

System.Web, Version=2.0.0.0, Culture=neutral,

PublicKeyToken=b03f5f7f11d50a3a"

connectionStringName="LocalSqlServer"

enablePasswordRetrieval="true"

enablePasswordReset="true"

requiresQuestionAndAnswer="true"

applicationName="/"

requiresUniqueEmail="true"

passwordFormat="Encrypted"

maxInvalidPasswordAttempts="3"

minRequiredPasswordLength="6"

minRequiredNonalphanumericCharacters="0"

passwordAttemptWindow="10"

passwordStrengthRegularExpression="" />

providers>

membership>

validationKey='whatever' decryptionKey='whatever' validation='SHA1'/>

don't forget to generate validation key and decryptionkey. This http://p2p.wrox.com/topic.asp?TOPIC_ID=16845 site helped me do.

-kushpaw

Комментариев нет: