Re: Lock a User/MembershipProvider/Login control

Well, there is a DisableCreatedUser property on the CreateUserWizard -- don't know if this helps.

-Brock
http://staff.develop.com/ballen


Thanks Brock,
so there is no direct support of this feature in the Login control.
I dont know why I always have to walk through those gray areas when
implementing standard requirements ;-)

ulrich

"Brock Allen" wrote:

This is a gray area in provider design. The intent of IsLockedOut is
to prevent an attacker from guessing passwords. To that end, it's up
to the provider internally to determine when this is happening and to
lock the user out. So their semantics and use for IsLockedOut is very
specific, thus they intended for each specific membership provider to
"figure it out". Since there is no LockUser API it seems that they
didn't intend for it to be used as a general "suspension" mechanism
for users.

-Brock
http://staff.develop.com/ballen
Hi experts,

i wrote a custom MembershipProvider and when i come to implement the
method
"UnlockUser" i wonder that there is no method "LockUser".
The member "IsLockedOut" of a MembershipUser is readony.
So, how do I lock a user?
I extend my custom provider class with a Method "LockUser". Is that
the right way?
Second question:

Does the Login control locks a User automatically, if the members
"MaxInvalidPasswordAttempts" and "PasswordAttemptWindow" are set or
do i have to code this manually in the eventhandlers of this
control?

Thanks in advance,
ulrich


.

Relevant Pages

  • Re: OOP help (in regards to ASP.NET Membership)
    ... If you are using the standard implementation, you can inherit from the ... provider you are using and simply add ... One thing I do not like about the default provider is you can set up a lock, ... I just found out that ASP.NET membership does not have a method to ...
    (microsoft.public.dotnet.general)
  • Re: Lock a User/MembershipProvider/Login control
    ... it's up to the provider internally to determine when this is happening and to lock the user out. ... So their semantics and use for IsLockedOut is very specific, thus they intended for each specific membership provider to "figure it out". ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Login control problems
    ... I'm trying to use the login control and have it use the membership ... In fact it uses the default membership provider if you don't specify ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Defining Groups with AD users
    ... For ASP.NET authentication and role based authorization, ... you can configure the membership to use AD ... membership provider and Rolemanager to use SQL server provider. ... Microsoft MSDN Online Support Lead ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: [PATCH 1b/7] dlm: core locking
    ... > guess point to point communication like tcp but with some other kind of ... > are related to the current membership. ... > A sends lock to lock master B (but A doens't know B has dropped out of ... In the kernel, there's nothing to it. ...
    (Linux-Kernel)