Microsoft KB Archive/269148

= Password Encryption in Site Server Is Disabled =

Article ID: 269148

Article Last Modified on 6/29/2004

-

APPLIES TO


 * Microsoft Site Server 3.0 Standard Edition
 * Microsoft Site Server 3.0 Commerce Edition

-



This article was previously published under Q269148



SYMPTOMS
When you change the system locale settings to French/France, passwords in the Site Server 3.0 membership database are no longer encrypted, and users can no longer authenticate because decryption is also disabled when the Lightweight Directory Access Protocol (LDAP) service is reading the passwords from the membership database.



CAUSE
This behavior has been implemented to adhere to the restrictions on encryption technology imposed by the French government. Although these legal restrictions have been relaxed recently, encryption is still disabled if the application is running on a server in France. (The program considers a server to be in France when the system locales are set to France.)

Microsoft has not changed the behavior in the software because this would cause problems for existing installations.



MORE INFORMATION
To avoid this problem, do not change the system locale settings to or from France after the membership database has been created.

If either of the following registry keys is set as described here, then password encryption is disabled:
 * HKEY_USERS\.DEFAULT\Control Panel\International\iCountry = 33
 * HKEY_USERS\.DEFAULT\Control Panel\International\Locale = 0x40C

Keywords: kbenv kbprb KB269148

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.