Password Reset not working on Login or User Screen - Bugs & Issues - Bugs & Issues - Progress Community

Password Reset not working on Login or User Screen

 Bugs & Issues

Password Reset not working on Login or User Screen

  • Password Reset not working on Login or User Screen
  • I'm using Sitefinity 4.4 and trying to reset a user's password after she told me the 'Forgot Your password?' link wasn't working.

    I've verified that when clicking the link on the login page it does nothing in any browser. I figured as a workaround I could go to the users screen and click on the 'Reset password' button. After clicking the button a new password is no longer shown.

    Is this something that other people are experiencing or have I done something to cause this behavior (I don't think I have)?
  • Hi Mark,

    First of all you need to set properly your SMTP settings in Administration -> Settings -> Advanced -> System -> SMTP Settings. Do not forget to set a valid sender email address. Also for your membership provider - I suppose it is the "Default" one, you need to set the enablePasswordReset property to "true". Go to Administration -> Settings -> Advanced -> Security -> Membership Providers -> Default -> Parameters and there set a valid

    recoveryMailAddress
    enablePasswordReset

    Also make sure that recoveryMailBody contains the following special tag:

    <%\s*Password\s*%>

    Regards,
    Lubomir Velkov
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  • I'm having the same problem - in 4.2. Not working like it did in earlier versions.

    What are all these steps we have to take all of sudden.
  • Hello Scott,

    We made some changes to the way the reset password functionality works. Is my previous reply not working for you?

    Regards,
    Lubomir Velkov
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  • This reply is not working for me. I put in a support ticket request.

    Also, does this mean that the user will get their password sent to them via email every time they change their password or only when they need a new password sent to them because they forgot?
  • Hello Amanda,

    I replied to your ticket. The user will get an email every time the password is being changed. However you need to include the special tag - <%\s*Password\s*%> - that will be replaced with the actual password in the email body.

    Greetings,
    Lubomir Velkov
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  • I have all these settings set properly, the resets work properly, but do we not see the new password in the backend interface anymore?
  • 330614_ResetPassword.png
    Hello Kristian,

    This is strange. You should see the new password in a yellow box like the attached image.


    All the best,
    Lubomir Velkov
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  • was there a resolution to this.

    I (as admin) also do not see the new password - there is no yellow box after you click "reset password" in edit user screen.

    In addition - the sitefinity log in screen forgot password doesn't do anything. 
    i changed the enablePasswordReset to True

  • was there a resolution to this.

    I (as admin) also do not see the new password - there is no yellow box after you click "reset password" in edit user screen.

    In addition - the sitefinity log in screen forgot password doesn't do anything. 
    i changed the enablePasswordReset to True

  • Hello,

    Please excuse us for the inconvenience caused. Actually we have introduced some changes in this functionality since the Sitefinity 4.4 release for security improvements. If you want to enable the password reset functionality you'll need to go to Advanced settings and edit the Default MembershipProvider parameter enablePasswordReset, which is set to flase by default. please set it to true, and also configure defaultSenderAddress to a valid email address which Sitefinity will use when sending the password reset email. Aside from that, you'll need to perform the regular SMTP settings so the application can actually send emails. Once you've got everything configured you might need to recycle your application pool, to make sure the new configuration is read, an you should have the new password displayed in the User profile screen just like it used to in previous versions. Please do not hesitate to let us know if you need some additional information on the issue, or you have any other questions. We'll be glad to help you further.

    All the best,
    Boyan Barnev
    the Telerik team
     
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
     
  • as per my post above - i had already changed the setting to true and email is working properly.

    Please advise

  • Hi,

    The DefaultSenderEmailAddress parameter belongs to the System SMTP settings, and is configured under Administration -> Settings -> Advanced -> System -> SMTP settings, please make sure it is filled in with a valid email address.
    Under parameters for the Default MembershipProvider, please make sure you've set the recoveryMailAddress to a valid email address; enablePasswordReset and enablePasswordRetrieval to true, and try restarting the application to make sure the new provider keys are loaded. If any issues persist, please do not hesitate to get back to us.

    Kind regards,
    Boyan Barnev
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  • It does not work for me as well.  I followed your instructions with setting values inside the config files.  
    It does send am email when I change the password from Administration-> Users page.  It does not do it from my website.

    Side note: I can send emails from my website without a problem.

    What do you think Boyan?  I am using SF50 with latest pack.