Re: URGENT: please help ASP.NET Forms authentication and recycling of application pool

From: Dominick Baier [DevelopMentor] (dbaier_at_pleasepleasenospamdevelop.com)
Date: 05/26/05 

Date: Thu, 26 May 2005 00:10:00 -0700

Hello anjinho,

as i said - formsauth does not rely on session but on cookies - so yes that
would help...

but this doesn't solve the recycling prob - causes for recycling could be:

- misconfigured <processModel> element in machine.config
- write access to web.config

Win2K also has a state server - so this is no argument.

I would urge you/the provider to upgrade - running IIS5 in a shared hosting
scenario is a major secuirty problem.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

> Hello Dominick
>
> I asked and see that my hoster uses IIS 5 and win 2000 and I have not
> an option of a state server.
>
> I know that under IIS6 is an application pool that gets recycled, is
> this also the case under IIS5?
>
> I have never problems, only now and then that I lose sessions (within
> the time-out).
>
> So can I fix the problem with forms authentication because they rely
> on cookies?
>
> Best regards
> Andrew
> Dominick Baier [DevelopMentor] wrote:
>
>> [B]Hello anjinho,
>>
>> Context.User is rehydrated on every request and does not rely on
>> something store InProc.
>>
>> A quick way of mitigating the recycling problem is to use the
>> StateServer
>> - change web.config to StateServer and enabled the local ASP.NET
>> StateServer
>> service in computer manager.
>> ---------------------------------------
>> Dominick Baier - DevelopMentor
>> [url]http://www.leastprivilege.com[/url]
>> [color=darkred]
> --
> anjinho
> ----------------------------------------------------------------------
> --
> Posted via http://www.codecomments.com
> ----------------------------------------------------------------------
> --

Relevant Pages

  • Re: Recycled Application Pool
    ... There's different ways to manage IIS 5 and IIS 6. ... recycling settings, to see if anything rings a bell. ... If you need to persist your session values, ... IIS's State Server or with SQL Server. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: IIS 6.0 Session expired with the following simple ASP lines?!?
    ... the session expires before the defined timeout if ... the application pool is recycling. ... I use this code to determine if the application is recycling: ... oh, btw, session and cookies are not the perfect way to work, write your own ...
    (microsoft.public.inetserver.iis)
  • Re: Session Timeout Problem
    ... "recycling threshold settings" in IIS. ... My original question at the ... Have you attempted to set a different recycling threshold in the IIS ... session variables due to Application/App Pool recycling. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Timeout period not seeming to work correctly
    ... > for recycling the ASP.NET worker process. ... > restarts, causing the loss of all your session variables, ... > if you're using InProc state management. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Live multi-user debugging? Help!
    ... Memory recycling: well, if it comes to that, either add more RAM or find the ... session state (if so, look out for the session state timeout for the web ... have another one going so that people can still use the web site. ...
    (microsoft.public.dotnet.languages.vb)