CS2008 InvalidPassword RegEx

CS2008 InvalidPassword RegEx

This question is answered

Hi, I'm hoping someone can help me before I contact Telligent with a support ticket.

There is a RegEx that is used to control whether or not a password is considered valid.  My installation has the following RegEx:  ^.*$.

From what I know of regex's, I thought this means you can have *any* password, & CS would consider it valid.  Am I missing something on that point?

OTOH, if it's as I expect, then can someone tell me why the password "test" fails?

- O8

 

Verified Answer
  • Take a look at the membership configuration in your web.config file - there are some other configuration options you may need to account for.

                    <add
                        name="CommunityServerSqlProvider"
                        type="CommunityServer.ASPNet20MemberRole.CSMembershipProvider, CommunityServer.ASPNet20MemberRole"
                        connectionStringName="SiteSqlServer"
                        enablePasswordRetrieval="false"
                        enablePasswordReset="true"
                        requiresQuestionAndAnswer="false"
                        requiresUniqueEmail="true"
                        passwordFormat="Hashed"
                        applicationName="dev"
                        description="Stores and retrieves membership data from the local Microsoft SQL Server database"
                        maxInvalidPasswordAttempts = "999"
                        passwordAttemptWindow = "999"
                        minRequiredPasswordLength = "6"
                        minRequiredNonalphanumericCharacters = "0"
        />

  • Yes.  The web.config settings are from the ASP.NET Membership system, and CS has a regular expression which runs along side it.

All Replies
  • Take a look at the membership configuration in your web.config file - there are some other configuration options you may need to account for.

                    <add
                        name="CommunityServerSqlProvider"
                        type="CommunityServer.ASPNet20MemberRole.CSMembershipProvider, CommunityServer.ASPNet20MemberRole"
                        connectionStringName="SiteSqlServer"
                        enablePasswordRetrieval="false"
                        enablePasswordReset="true"
                        requiresQuestionAndAnswer="false"
                        requiresUniqueEmail="true"
                        passwordFormat="Hashed"
                        applicationName="dev"
                        description="Stores and retrieves membership data from the local Microsoft SQL Server database"
                        maxInvalidPasswordAttempts = "999"
                        passwordAttemptWindow = "999"
                        minRequiredPasswordLength = "6"
                        minRequiredNonalphanumericCharacters = "0"
        />

  • so the control panel AND the web.config define password lengths?

     

  • Yes.  The web.config settings are from the ASP.NET Membership system, and CS has a regular expression which runs along side it.