Solved

Membership.ValidateUser returns error message The server is unwilling to process the request. (Exception from HRESULT: 0x80072035)

Posted on 2010-09-08
6
1,035 Views
Last Modified: 2013-11-08
I currently have a web site that is integrated with Active Directory using the MemberShip provider.  Everything works fine and I can create/edit/ and change passwords for users. Occasionally a user gets hung and calling the ValidateUser method returns  "The server is unwilling to process the request. (Exception from HRESULT: 0x80072035)" for a particular user.  The only way around this is to delete and add the account again.  Other users can continue to log in to the system.

Here is the method call : Membership.ValidateUser(uid, pwd);
0
Comment
Question by:zekuczynski
  • 3
  • 3
6 Comments
 
LVL 5

Expert Comment

by:LlamaJoe
ID: 33632891
In a brief web search - I found a number of references to this error and the user not having a password that met the Password policy as defined on the domain controller.  So ensure that the GUI enforces the same password policy as AD.
0
 

Author Comment

by:zekuczynski
ID: 33637067
I did.  I even set it to a password that I used to reset mine that did not conflict with the password policy.  Still no luck.  The domain lets me change the password for this user and I can get the user using GetUser(userid).  I still get this error when I try to validate the account.
0
 
LVL 5

Expert Comment

by:LlamaJoe
ID: 33668708
have you defined a machine key in your web.config?  this will ensure that the password hash is always the same.

try this tool to create a machine.key value - http://aspnetresources.com/tools/machineKey
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:zekuczynski
ID: 33674339
Yes we do have a machinekey in the web.config file
0
 
LVL 5

Accepted Solution

by:
LlamaJoe earned 500 total points
ID: 33678183
can I assume you have both encryption and decryption keys defined?
0
 

Author Closing Comment

by:zekuczynski
ID: 33852208
I will continue to research this further.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Suggested Solutions

Introduction This article shows how to use the open source plupload control to upload multiple images. The images are resized on the client side before uploading and the upload is done in chunks. Background I had to provide a way for user…
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now