YAFLogo

nopfinance
  • nopfinance
  • 53% (Neutral)
  • YAF Forumling Topic Starter
5 years ago
I just installed YAF. I stepped through all the installation steps and entered an administration account with a simple user name and simple password.

After completion I see a record in the users table.

Nevertheless YAF keeps telling me my the account or password is invalid.

I tried this installation two times. Once without and once with AspNetSqlMembershipProvider enabled

I can't get my finger behind this issue...

any help would be nic

I am a yaf newbie! first time installation

Sponsor
nopfinance
  • nopfinance
  • 53% (Neutral)
  • YAF Forumling Topic Starter
5 years ago
btw

The yaf_user record shows 'na' in the password field

nopfinance
  • nopfinance
  • 53% (Neutral)
  • YAF Forumling Topic Starter
5 years ago
I noticed one more thing:

I registered a new user with username 'test' and password 'test12'

Upon registration I was automatically logged in.

Then I logged out.

Next when I try to login with test, test12 I received the error that my account or password are incorrect.

I now have the source code running on my development computer. Where does the actual username / password get checked, in what c# function?

tha_watcha
  • tha_watcha
  • 100% (Exalted)
  • YAF.NET Project Lead 🤴 YAF Version: 4.0.0 rc 2
5 years ago
Please change the hashAlgorithmType to SHA1 in the web.config

from-...

<membership defaultProvider="YafMembershipProvider" hashAlgorithmType="HMACSHA256">

to

 <membership defaultProvider="YafMembershipProvider" hashAlgorithmType="SHA1">

You also need to clear the database

nopfinance
  • nopfinance
  • 53% (Neutral)
  • YAF Forumling Topic Starter
5 years ago
thx. I'll try this later
nopfinance
  • nopfinance
  • 53% (Neutral)
  • YAF Forumling Topic Starter
5 years ago
SHA1 was indeed the solution!

Request: Set SHA1 default in the webconfig, instead of SHA256. Saves ignorant users like me a lot of time....