AD sync problem with AD password not meeting DNN password policy - Authentication Providers [Lead: Mike Horton]

Forum DotNetNuke® Pro... Authentication ... AD sync problem with AD password not meeting DNN password policy

5/8/2008 1:20 AM

	NH
13 posts

AD sync problem with AD password not meeting DNN password policy

Hello out there DNN-freaks!

Iam a newbie to DNN and I have been assigned a DNN-project at my new job. Now Iam trying to get DNN and AD syncing users/groups.

It now seems like DNN doesn´t sync users when their password in AD doesn´t meet DNNs password policy. DNN require 7 characters. When trying to login in DNN withe a AD-user with fewer characters in their password I fail. Changing their password to 7 characters in AD seems to solve the problem, and the user is added and in the correct group.

At first login (with a 7 char pw) i also get this error message:
"A critical error has occurred.
Unknown UserCreateStatus value encountered Parameter name: UserRegistrationStatus"
I dosen´t get logged in this first time when the error is displayed. But when I try loggin once more I get logged in.

1. Can this be a correct observation?
2. How can I change DNN password policy to except fewer characters?
3. Any idea on the error message?

Thankful to any suggestions!
/Niclas

5/8/2008 4:21 AM

	Tom McMurtry
54 posts

Re: AD sync problem with AD password not meeting DNN password policy

change the password minimum length requirement in web.config:

add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="SiteSqlServer" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="0" requiresUniqueEmail="false" passwordformat="Encrypted" applicationName="DotNetNuke" description="Stores and retrieves membership data from the local Microsoft SQL Server database"

by default it is set to 7

as for the other error message, this could be due to some fields being populated in AD that get copied over, while others are missing in AD. I have an error similar to this when users don't have the region information filled in on the AD account.

5/8/2008 6:30 AM

	NH
13 posts

Re: AD sync problem with AD password not meeting DNN password policy

Thanx Tom for the answer on my first question! It solved that isue!

As for my other problem regarding the error message "A critical error has occurred.
Unknown UserCreateStatus value encountered Parameter name: UserRegistrationStatus" I found out that this was a known bug. Mike has a BETA version of AD 1.00.04 that solved the problem. Found here: http://www.dotnetnuke.com/Community/Forums/tabid/795/forumid/89/threadid/218593/scope/posts/threadpage/1/Default.aspx

Thanx again!

5/8/2008 8:08 AM

	Mike Horton
2962 posts
dnn.gmss.org

Re: AD sync problem with AD password not meeting DNN password policy

The 01.00.04 beta fixes the "Unknown UserCreateStatus value encountered Parameter name: UserRegistrationStatus" error though some users are having problems with synchronization working properly that I haven't figured out yet (nothing changed in the synchronization code between versions and I can't duplicate it on any of my production or test systems. With the error the user is created as it should be but the core was changed slightly and a check was removed from it so a the default message (above) is returned to the AD code instead of a success message.

5/8/2008 8:16 AM

	Mike Horton
2962 posts
dnn.gmss.org

Re: AD sync problem with AD password not meeting DNN password policy

Heh I replied before I saw your post in the moderation queue.

Page 1 of 1

Forum

DotNetNuke® Pro...

Authentication ...

AD sync problem with AD password not meeting DNN password policy