ADMembershipProvider

[mbiro]

With .net 2.0, I am using the ADMembershipProvider to connect to Active Directory (not ADAM). Looking through the MSDN sites, it shows an attribute 'enablePasswordRetrieval' that can be true or false. Every example I find on Google shows it set to false. I would like to set it to true, but either way, if I put enablePasswordRetrieval="false" in the membership provider, .net throws the error "Attribute not recognized 'enablePasswordRetrieval'".

Am I better off allowing password reset and hashing the password in AD, anyway? Or is it okay to not hash the password and allow(if possible) password retieval?

I have extended my AD schema to allow for the password question/answer stuff. Any advice?

 

[jmeckley]

i don't think you can retrieve a password from AD.

I would assume AD manages pwd encryption. if you hash the pwd and then send it to AD. AD will want the hash instead of the real password.

Jason Meckley
Programmer
Specialty Bakers, Inc.

 

[mbiro]

Thanks for the reply, Jason. I am coming to the same conclusion. It is weird, though, that MSDN shows it as being an attribute...