Re: Migrating users to asp.net 2.0 from CSK and setting passwords
From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 05/20/05
- Previous message: Steve B.: "Re: Appl. Security Problems"
- In reply to: burtonman: "Migrating users to asp.net 2.0 from CSK and setting passwords"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 20 May 2005 14:42:13 -0700
Hello burtonman,
i assume the password in your source store are cleartext.
You have to programmatically migrate the users. Grab a copy of Reflector
(www.aisto.com/roeder) and have a look at SqlMemberShipProvider.CreateUser()
in System.web.dll.
They basically create a 16byte salt with RNGCryptoServiceProvider (as Base64)
and hash the password and the salt with the configured hashing algo.
Another option would be to write your own membership provider to map to your
old schema. documentation for doing this is in msdn.
---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com
> Hello -
>
> I have existing users in a CSK-schema who each have passwords. I need
> to migrate these users to the asp.net tables in .net 2, but I haven't
> found any way to set the new passwords, password salt and password
> question properly.
>
> Is it possible to use t-sql to migrate these records or do I have to
> use the .net framework? Where do I access the tools to set the
> passwords properly?
>
> Thanks for any help or relevant experience.
>
- Previous message: Steve B.: "Re: Appl. Security Problems"
- In reply to: burtonman: "Migrating users to asp.net 2.0 from CSK and setting passwords"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|