Self Service Password Reset

[zbjsy]

Does anyone elses form check not work on the reset page? reset/

 

It seems to be allowing any combination from no password at all! Help

[zbjsy]

Does anyone elses form check not work on the reset page? reset/

 

It seems to be allowing any combination from no password at all! Help

 

 

anyone have it working?

[zbjsy]

managed to get it working, seems that page doesnt like the variables used, if you manually set them in that, min length etc it works. can supply code if needed.

[plexer]

managed to get it working, seems that page doesnt like the variables used, if you manually set them in that, min length etc it works. can supply code if needed.

 

Are you saying that the variables set in the config.asp file don't actually get read/used properly in the main code?

 

Thanks.

 

Ben

[zbjsy]

yes but it seems only the page in the reset folder.

[acraiger]

managed to get it working, seems that page doesnt like the variables used, if you manually set them in that, min length etc it works. can supply code if needed.

 

If you could upload the code as to how you did this, that would be great.

I've gotten a new boss, and he decided he wants this implemented this.

 

I just discovered that a user can set their password to blank, which is not good.

It does seems to error out for any other password that does not meet our Domain password complexity.

 

If I figure out a solution, I'll upload my code change.

[acraiger]

For the Select Case PwdType on reset_pass.asp

I added an If statement:

 

I changed it from:

Case 5

If (Not ISEmpty(Request.Form("NewPass"))) Then

NewPassword = Request.Form("NewPass")

'check for blank password

ResetPass()

Else

PWPromptUser()

End If

 

To:

Case 5

If (Not ISEmpty(Request.Form("NewPass"))) Then

NewPassword = Request.Form("NewPass")

'check for blank password

If NewPassword = "" Then

PWPromptUser()

Else

ResetPass()

End If

Else

PWPromptUser()

End If

 

It's probably not the cleanest way to do this, but it seems to be working.

 

I wish I knew how to program in ASP a little better, then I could create better fixes.

[zbjsy]

i've modified ours quite a bit as dont want people to use the word password, so you may gave to take that bit out, but here you go:

 

reset/reset_pass.asp

 

JavaScriptHeader = "function formValidation(form)" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "{" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "if(notpassword(form.NewPass))" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "{" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "if(minLength(form.NewPass)){" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return true;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "} else {" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "alert(""Your password must be at least 6 characters long"");" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "document.form.NewPass.focus();" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "} else {" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "alert(""You cannot use the word password as a new password"");" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "document.form.NewPass.focus();" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return false;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine


JavaScriptHeader = JavaScriptHeader & "function notEmpty(elem)" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "{" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "if(elem.value.length == 0){" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return false;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "} else {" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return true;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine

JavaScriptHeader = JavaScriptHeader & "function notpassword(elem)" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "{" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "if(elem.value.toLowerCase() == 'password'){" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return false;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "} else {" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return true;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine

JavaScriptHeader = JavaScriptHeader & "function minLength(elem)" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "{" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "if(elem.value.length > 5){" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return true;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "} else {" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "return false;" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine
JavaScriptHeader = JavaScriptHeader & "}" & vbNewLine

[apeo]

Is the latest version of this in the zip file in the first post?

[apeo]

Nevermind, did a search on this thread for attachments.

[Sravs]

Hi, Thanks for this simple and easy tool.. it works perfectly on test network.. I will deploy it on production environment this week. just wondering is there any way to reduce the question at registration page? I don't need three questions there

[plexer]

Hi,

 

Glad you like it and it works for you.

 

There is no way to reduce the number of questions without hacking a lot of code out I don't think.

 

Will consider it as a feature request for the next version.

 

Thanks.

 

Ben

[thomasdavid1]

Hi Guys,

 

Im looking for something like this, does it work on Windows Server 2008 R2?

 

Thanks - Tom

[plexer]

Hi Tom,

 

Don't know if it's been tried on that, care to give it a whirl and let us know?

 

Ben

[thomasdavid1]

See if I can set it up on a virtual server tomorrow and give it a test.

[themaster0071]

Just a FYI,

 

Anyone wanting to use on 2008 server R2 it works fine.

 

If anyone can help with a custom gina for Windows 7 I would appreciate it, I need help with it so we can have the reset password option on the login screen.

Edited June 28, 2011 by themaster0071

[rmanasa]

Hi,

 

I have followed the process mentioned for setting the password reset option on the desktop for users. However, when i restart the system, the tool is not shown.

 

Can you please let me know what is that i have to do to make the tool visible always.

 

Thanks

[zbjsy]

did you have to do anything different on 2008? in process of migrating from 2003 to 2008 r2

[rmanasa]

The above mentioned issue is resolved. However, when a user is trying to reset his password, he gets the below error.

 

Error: User x has not been registered. Please check you entered the username correctly and try again. If you entered your username correctly then password reset is not possible.

 

Please contact an administrator.

 

I have tried reset the counters and resetting the user's questions.

 

Any help is appreciated.

[zbjsy]

'Active Directory Group whose passwords can be reset by resetGroup

usersGroup = "Student Group"

 

Can this have multi student groups listed in it?

 

As I have a Student group that has all the other student groups added to it but this does not work

[plexer]

I've never tested it with nested groups but it sounds from your testing that it isn't a supported configuration can you not make a group specifically for this purpose and add all student accounts to it?

 

Ben

[zbjsy]

You are correct nested groups does not work. I have now created a group and merged all the students into it

[RoyaMarie]

I was looking over the great work you posted for the self service password reset and I saw one of the posts saying there was a video. I did not see a link to a video. I would love to see it if you still know a link to it. I know it has been years.

I am new to software and this is the hardest project I have been assigned yet. I really want to make sure I do everything correctly.

[RoyaMarie]

This screencast is not seeming to work