Re: ActiveDirectoryMembershipProvider & ChangePassword control

When you log on to a workstation or server at the terminal or through
terminal services.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"dknight" <dknight@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:55F5AD40-A86E-452F-980A-45FA83B9E63D@xxxxxxxxxxxxxxxx
What is an interactive logon?

"Joe Kaplan" wrote:

"Change password at next login" is not supported via any type of LDAP
auth
which is what the membership provider uses, so essentially you can't do
this. As far as I know, you can only support this feature via
interactive
logon.

Joe K.
--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services
Programming"
http://www.directoryprogramming.net
--
"dknight" <dknight@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:352A1A2B-BFE7-4836-912D-52B5AC84B262@xxxxxxxxxxxxxxxx
I'm using AD for my asp.net c# forms authentication. The login control
works
great.
However we need the provider to force a change of password when the AD
account's "User must change password on next login" attribute is set to
true.
Using DirectoryServices I can check to see if the attribute is set but
when
I try to use the ChangePassword control it won't reset the password. I
get
a
"Password incorrect or New Password invalid. New Password length
minimum:
7.
Non-alphanumeric characters required: 1" warning even though Iv'e met
the
password rules.
Does this provider support the ChangePassword control?
Thanks.






.

Relevant Pages

  • Re: Integrated Windows Authentication Timeout?
    ... For the second search, if the user account has an SPN of HTTP/webserver, ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... You might consider enabling protocol transition authentication ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Integrated Windows Authentication Timeout?
    ... is the username of the user account that runs the service. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... You might consider enabling protocol transition authentication since ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Integrated Windows Authentication Timeout?
    ... is the username of the user account that runs the service. ... You should then be able to see the SPNs that are on that account. ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: How to bypass Forms Authentication on selected pages programma
    ... authentication but before authorization) check the Url of the Request to see ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.dotnet.security)
  • Re: Accessing security information from an authentication provider
    ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.platformsdk.security)