Re: MembershipProvider limit no effect.

Dose we need implement these features in my custom Membership provider or
just set these feature in web.config?




"Juan T. Llibre" <nomailreplies@xxxxxxxxxxx> ¼¶¼g©ó¶l¥ó·s»D:%23kHZbPsFHHA.5104@xxxxxxxxxxxxxxxxxxxxxxx
Typo...

Maybe 10 minutes is too long for the MaxInvalidPasswordAttempts property
?

Should have been :

Maybe 10 minutes is too long for the passwordAttemptWindow property ?

Sorry...

Try :

passwordAttemptWindow="2"



Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
===================================
"Juan T. Llibre" <nomailreplies@xxxxxxxxxxx> wrote in message
news:ur5vFNsFHHA.3468@xxxxxxxxxxxxxxxxxxxxxxx
Maybe 10 minutes is too long for the MaxInvalidPasswordAttempts property
?

The MaxInvalidPasswordAttempts property works in conjunction with the
PasswordAttemptWindow
property to guard against an unwanted source using repeated attempts to
guess the password
or password answer of a membership user.

If the number of invalid passwords or password answers entered for a
membership user is greater
than or equal to the value of the MaxInvalidPasswordAttempts property
within the number of minutes
specified by the PasswordAttemptWindow property, then the user is locked
out of the Web site by
setting the IsLockedOut property to true until the user is unlocked by a
call to the UnlockUser method.

Try :

passwordAttemptWindow="2"



Juan T. Llibre, asp.net MVP
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
===================================
"Jon Paal" <Jon[ nospam ]Paal @ everywhere dot com> wrote in message
news:eH$L$3pFHHA.1816@xxxxxxxxxxxxxxxxxxxxxxx
<membership>
<providers>
<remove name="AspNetSqlMembershipProvider" />
<add name="AspNetSqlMembershipProvider"
type="System.Web.Security.SqlMembershipProvider, System.Web,
Version=2.0.0.0, Culture=neutral,
PublicKeyToken=b03f5f7f11d50a3a"
connectionStringName="MyConnectionstring"
minRequiredPasswordLength="4"
minRequiredNonalphanumericCharacters="0"
enablePasswordRetrieval="false"
enablePasswordReset="true"
requiresQuestionAndAnswer="true"
applicationName="/"
requiresUniqueEmail="true"
passwordFormat="Hashed"
maxInvalidPasswordAttempts="5"
passwordAttemptWindow="10"
passwordStrengthRegularExpression="" />
</providers>
</membership>


"ad" <flying@xxxxxxxxxxxxxxx> wrote in message
news:uxoz2gfFHHA.3508@xxxxxxxxxxxxxxxxxxxxxxx
I have set some limit of MembershipProvider in web.config.

<add name="MyMembershipProvider" type="MyMembershipProvider"
MaxInvalidPasswordAttempts="3"
MinRequiredPasswordLength="6" />

But it no effect when valid user and change password.

How can I do?











.

Relevant Pages

  • news from http://www.bikejournal.com
    ... Basic membership is free. ... Create as many filters ... Plans are underway for a major upgrade to bikejournal. ... and new features will be added periodically. ...
    (rec.bicycles.misc)
  • Re: Migration Documents: Beta 2 to ASP.NET 2.0 Shipping Bits
    ... Thanks Juan, I went over the document closely this time and ran ... > new Membership database with aspnet_regsql.exe." ... > Personalization database changed between Beta 2 and RTM, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: ASP.NET Membership - Changing the contract
    ... there are no such links - also for profile - you will not lose the profile ... Membership and other features of VS2005 that might be interesting to maintain. ... I don't know if there is any feature in VS2005 that utilizes the Membership API under the covers, if there is any, I'll like to know it. ... why do you want to use the provider pattern - it will be more work teaching the provider your new tricks than writing your own authentication/user mgmt library - you have to do that anyways if you write a provider. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • 2.0 Custom Membership Provider!
    ... I am in the process of creating a custom membership provider: ... Is their someway i can adjust the CreateUser member signature? ... username, string password, string email, string passwordQuestion, string ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Oracle membership ?
    ... "We created a custom membership provider implementation for Oracle. ...
    (microsoft.public.dotnet.framework.aspnet)