Password expires?

SouthendSupporter · January 20th, 2010, 09:54 AM

Hi
I am using roles and membership for a website.
My web.config contains

Code:

<membership>
            <providers>
                <clear/>
        <add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider, System.Web, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" 
                  connectionStringName="ChamberofCommerceConnectionString" 
                  enablePasswordRetrieval="false" 
                  enablePasswordReset="true" 
                  requiresQuestionAndAnswer="false" 
                  applicationName="/" 
                  requiresUniqueEmail="false" 
                  passwordFormat="Hashed" 
                  maxInvalidPasswordAttempts="5" 
                  minRequiredPasswordLength="6" 
                  minRequiredNonalphanumericCharacters="0" 
                  passwordAttemptWindow="10" 
                  passwordStrengthRegularExpression=""/>
            </providers>
        </membership>

My problem is that the site went live about a month ago and the users just reported that they cannot login using any user.
Setting up two new users and assigning appropriate roles enabled them to continue.
Do the passwords expire?
Is there a passwordvaliditytime= or something like it.
Preferably I want the passwords to not expire at all.

gbianchi · January 20th, 2010, 10:08 AM

Unless something has changes, the password do not expire...

Maybe the accounts are locked??? (because if you fail to get the correct password, membership provider locks them)

SouthendSupporter · January 20th, 2010, 10:20 AM

Quote:

Originally Posted by gbianchi

Unless something has changes, the password do not expire...

Maybe the accounts are locked??? (because if you fail to get the correct password, membership provider locks them)

Thanks Gonzalo
Do you know how long the lockout lasts? Assuming that it gets freed up eventually!
Is there a way to unlock a pasword?

gbianchi · January 20th, 2010, 10:47 AM

You need to lock them out.. .I remember doing a page to free the look, maybe Imar knows a better way.

Lee Dumond · January 20th, 2010, 11:19 AM

Quote:

Originally Posted by SouthendSupporter

Thanks Gonzalo
Do you know how long the lockout lasts? Assuming that it gets freed up eventually!
Is there a way to unlock a pasword?

Password locks do not "free themselves" unless you write custom logic to do that.

Othewrwise, you need to unlock them manually.

There are two ways to do that:

1) Create a page (accessible only to administrators, of course) that lets you unlock users using the Membership API:

MembershipUser user = Membership.GetUser(lockedUserName);
user.UnlockUser();

2) Go directly into the database and change the IsLocked field from True to False.