Forms Authentication problem

From: Cristian Lefter (CristianLefter_at_hotmail.com)
Date: 02/02/04


Date: Tue, 3 Feb 2004 00:16:18 +0200

I work on an ASP.NET application for an intranet that uses forms
authentication.
The authentication works fine on the workstations (Windows XP Professional)
but fails on Windows 2003 Server Standard edition. For some reason
http://localhost/WebApp works fine, http://IP/WebApp works also but
http://servername/WebApp doesn't. I looked at the http headers and when it's
not workin the server responds with an authentication cookie and a
ASP_Net_Session cookie but the browser doesn't send it back.

The code looks like :
"
Dim tkt As FormsAuthenticationTicket
      Dim cookiestr As String
      Dim ck As HttpCookie

      tkt = New FormsAuthenticationTicket(1, txtUserName.Value,
DateTime.Now(), _
dateTime.Now.AddMinutes(30), chkPersistCookie.Checked, "your custom data")
      cookiestr = FormsAuthentication.Encrypt(tkt)
      ck = new HttpCookie(FormsAuthentication.FormsCookieName(), cookiestr)
      if (chkPersistCookie.Checked) then ck.Expires=tkt.Expiration
      ck.Path = FormsAuthentication.FormsCookiePath()
      Response.Cookies.Add(ck)
"
We tried the HOW TO: Implement Forms-Based Authentication in Your ASP.NET
Application by Using Visual Basic .NET(
http://support.microsoft.com/?kbid=308157 ) with the same result.
The behavior is the same for another development server (also with Windows
2003 Server).

Thank you,
Cristian



Relevant Pages

  • Re: EAP-TLS with windows CE
    ... The AP was sending out an Identity Request every second, ... request to the identification server. ... When the server asks the Windows CE device to identify itself, ... I could easily steal your authentication information. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: server authentication & ASP authentication
    ... on to the client workstation with an authorized Windows account. ... SQL Server with Windows authentication. ...
    (microsoft.public.sqlserver.security)
  • Re: ADFS Development Issues
    ... site to be automatically authenticated by our windows application so ... based on redirects and possibly uses forms-based authentication to collect ... web service proxies don't handle this type of thing ... the server based on how it needs to work. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... > is turning on/off Kerberos is occuring. ... It control how IE deals with "Authentication: ... when you put IIS6 in a domain and have "Integrated Windows Authentication" ...
    (microsoft.public.windows.server.security)
  • Re: Change in ASP.Net authentication between Win2000 and Win2003
    ... > is turning on/off Kerberos is occuring. ... It control how IE deals with "Authentication: ... when you put IIS6 in a domain and have "Integrated Windows Authentication" ...
    (microsoft.public.inetserver.iis.security)