473,395 Members | 1,870 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,395 software developers and data experts.

.NET Forms Authentication / Session cookies

Hi,

I have a site that uses forms authentication to secure the directory. The
site behaves as expected when viewed externally... if I close the browser
and attempt to access it again, I get prompted to login. However, locally
here on the network, if I close the browser and open a new one and access
the site again, I don't have to login. Can anyone shed some light as to
what's going on?

Thanks,
Brian
Nov 18 '05 #1
5 1916
Are you sure that the permissions are the same in both cases.?
It sounds like one may be saving the cookie to disk and the other cannot so
it exists only for lifetime of the browser.
A
"anony" <no**@m.com> wrote in message
news:KW**********************@twister.tampabay.rr. com...
Hi,

I have a site that uses forms authentication to secure the directory. The
site behaves as expected when viewed externally... if I close the browser
and attempt to access it again, I get prompted to login. However, locally
here on the network, if I close the browser and open a new one and access
the site again, I don't have to login. Can anyone shed some light as to
what's going on?

Thanks,
Brian

Nov 18 '05 #2
Well, it's the same code in both cases.... just behaving differently when
viewed internally and externally. I'm not using persistent cookies... just
forms authentication using session cookies.

Thanks.
"Andrew de la Harpe" <an*********@hotmail.com> wrote in message
news:Of**************@tk2msftngp13.phx.gbl...
Are you sure that the permissions are the same in both cases.?
It sounds like one may be saving the cookie to disk and the other cannot so it exists only for lifetime of the browser.
A
"anony" <no**@m.com> wrote in message
news:KW**********************@twister.tampabay.rr. com...
Hi,

I have a site that uses forms authentication to secure the directory. The site behaves as expected when viewed externally... if I close the browser and attempt to access it again, I get prompted to login. However, locally here on the network, if I close the browser and open a new one and access the site again, I don't have to login. Can anyone shed some light as to
what's going on?

Thanks,
Brian


Nov 18 '05 #3
If you are not using persistent cookies then it seems that integrated
security is authenticating you somehow.
You could test this with a non-IE browser.
A
"anony" <no**@m.com> wrote in message
news:r7**********************@twister.tampabay.rr. com...
Well, it's the same code in both cases.... just behaving differently when
viewed internally and externally. I'm not using persistent cookies... just forms authentication using session cookies.

Thanks.
"Andrew de la Harpe" <an*********@hotmail.com> wrote in message
news:Of**************@tk2msftngp13.phx.gbl...
Are you sure that the permissions are the same in both cases.?
It sounds like one may be saving the cookie to disk and the other cannot

so
it exists only for lifetime of the browser.
A
"anony" <no**@m.com> wrote in message
news:KW**********************@twister.tampabay.rr. com...
Hi,

I have a site that uses forms authentication to secure the directory. The site behaves as expected when viewed externally... if I close the browser and attempt to access it again, I get prompted to login. However, locally here on the network, if I close the browser and open a new one and access the site again, I don't have to login. Can anyone shed some light as to what's going on?

Thanks,
Brian



Nov 18 '05 #4
It could be browser settings. Like your cookies are automatically deleted
when you close the browser on the external machine where they are not on
your LAN machine.
"anony" <no**@m.com> wrote in message
news:KW**********************@twister.tampabay.rr. com...
Hi,

I have a site that uses forms authentication to secure the directory. The
site behaves as expected when viewed externally... if I close the browser
and attempt to access it again, I get prompted to login. However, locally
here on the network, if I close the browser and open a new one and access
the site again, I don't have to login. Can anyone shed some light as to
what's going on?

Thanks,
Brian

Nov 18 '05 #5
I'm just using session cookies, not persistent. But I think I've figured
out the behavior. My original post was misleading because the behavior is
the same from the outside as it is on the inside (sorry about that!). The
page that is otherwise protected by forms authentication gets stored in the
temporary internet files folder and that is the page that is actually being
loaded when revisiting the live site (even after refreshing?). If I delete
the file and refresh my page, then forms authentication kicks in as expected
and makes them login. Now I've been playing with http/asp cache methods...

Thanks,
Brian

"Martin" <du***@somewhere.nl> wrote in message
news:3f***********************@news.wanadoo.nl...
It could be browser settings. Like your cookies are automatically deleted
when you close the browser on the external machine where they are not on
your LAN machine.
"anony" <no**@m.com> wrote in message
news:KW**********************@twister.tampabay.rr. com...
Hi,

I have a site that uses forms authentication to secure the directory. The site behaves as expected when viewed externally... if I close the browser and attempt to access it again, I get prompted to login. However, locally here on the network, if I close the browser and open a new one and access the site again, I don't have to login. Can anyone shed some light as to
what's going on?

Thanks,
Brian


Nov 18 '05 #6

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

11
by: ElmoWatson | last post by:
I tried on the Security newgroup, as well as other places, and haven't gotten an answer yet - - I'm pulling my hair out over this one. I'm trying to get Forms Authentication working.....I can get...
6
by: Harry Whitehouse | last post by:
I've got a fairly simple forms authentication project (a login page and a single secure page), but a number of users (~25%) can't seem to get past the login.aspx step. I theorized that this might...
1
by: Scott | last post by:
Hi, We're having an issue with Forms Authentication cookies being treated as expired / invalid, and being deleted. This is causing our intranet users a great deal of pain - Running IIS 5.0 on...
3
by: Kris van der Mast | last post by:
Hi, I've created a little site for my sports club. In the root folder there are pages that are viewable by every anonymous user but at a certain subfolder my administration pages should be...
3
by: Joey Powell | last post by:
This message was originally posted to the aspnet.security newsgroup, but no one there has ever heard of this before. That is why I am posting this message here, so that more people will see it... ...
0
by: mike parr | last post by:
I am using Forms authentication for the first time, and I'm having problems with it. I have 3 pages relating to the login, default.aspx, default_new_user.aspx and default_user.aspx. ...
3
by: Mike | last post by:
I have a web application that the forms authentication cookie is not expiring correctly. When I look at the trace information of a newly requested page after the session and forms authentication have...
4
by: Trevor Andrew | last post by:
Hi There, Hopefully this isn't too difficult a question to express here. I have a 3 tier application. 1. Presentation Tier: ASP.NET web application. 2. Middle Tier: ASP.NET Web Services that...
2
by: pv_kannan | last post by:
I recently found out that my authentication cookies are not expiring even though I have set the persist property to false. As a result, users are able to access the secure websites with indifferent...
1
by: Mark Olbert | last post by:
I'm building an ASPNET2 website which uses forms authentication but does not use the Microsoft-supplied membership providers (mostly because I don't want to create my own provider at this point, and...
0
by: Charles Arthur | last post by:
How do i turn on java script on a villaon, callus and itel keypad mobile phone
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
0
BarryA
by: BarryA | last post by:
What are the essential steps and strategies outlined in the Data Structures and Algorithms (DSA) roadmap for aspiring data scientists? How can individuals effectively utilize this roadmap to progress...
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
1
by: Sonnysonu | last post by:
This is the data of csv file 1 2 3 1 2 3 1 2 3 1 2 3 2 3 2 3 3 the lengths should be different i have to store the data by column-wise with in the specific length. suppose the i have to...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...
0
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven...
0
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.