Authorization cookie not valid for subdomains ?

[craigkenisston]

Hi,

I create a one day ticket in my authentication code like this :

private void btnLogin_Click( object sender, System.EventArg s e)
{

string _userId = txtUserId.Text;
string _password = txtPassword.Tex t;

if (FormsAuthentic ation.Authentic ate(_userId,_pa ssword))
{
FormsAuthentica tion.RedirectFr omLoginPage(_us erId,false);
FormsAuthentica tionTicket authTkt = new FormsAuthentica tionTicket(1,
"mycookie", DateTime.Now, DateTime.Now.Ad dDays(1), true, _userId);
HttpCookie authCookie = new
HttpCookie(Form sAuthentication .FormsCookieNam e);
authCookie.Valu e = FormsAuthentica tion.Encrypt(au thTkt);
authCookie.Expi res = DateTime.Now.Ad dDays(1);
Response.Cookie s.Add(authCooki e);
}

}
Recently I added some subdomains to my site and I realize that the
authorization is not valid there, i.e. the user appears as not logged
in.
How can I make an authorization ticket valid for all the domain and its
subdomains ?

[RCS]

authCookie.Doma in = "mydomain.c om";

That will make the cookie valid for any subdomain within mydomain.com

To be safe, you may want to do:

authCookie.Path = "/";

too - that makes the cookie valid for any directory within the site too...

HTH

<cr************ @hotmail.com> wrote in message
news:11******** **************@ o13g2000cwo.goo glegroups.com.. .

Hi,

I create a one day ticket in my authentication code like this :

private void btnLogin_Click( object sender, System.EventArg s e)
{

string _userId = txtUserId.Text;
string _password = txtPassword.Tex t;

if (FormsAuthentic ation.Authentic ate(_userId,_pa ssword))
{
FormsAuthentica tion.RedirectFr omLoginPage(_us erId,false);
FormsAuthentica tionTicket authTkt = new FormsAuthentica tionTicket(1,
"mycookie", DateTime.Now, DateTime.Now.Ad dDays(1), true, _userId);
HttpCookie authCookie = new
HttpCookie(Form sAuthentication .FormsCookieNam e);
authCookie.Valu e = FormsAuthentica tion.Encrypt(au thTkt);
authCookie.Expi res = DateTime.Now.Ad dDays(1);
Response.Cookie s.Add(authCooki e);
}

}
Recently I added some subdomains to my site and I realize that the
authorization is not valid there, i.e. the user appears as not logged
in.
How can I make an authorization ticket valid for all the domain and its
subdomains ?

[craigkenisston]

Thanks, that worked!