Re: Cookieless forms authentication



The forms auth infrastructure takes care of all the details how to set and authenticate the ticket. Use the login control or the FormsAuthentication class if you want to do it manually. Also set the cookieless attribute to UseUri in web.config.

Here is more information regarding custom data in the ticket:

http://www.leastprivilege.com/HowToGetCookielessFormsAuthenticationToWorkWithSelfissuedFormsAuthenticationTicketsAndCustomUserData.aspx

-----
Dominick Baier (http://www.leastprivilege.com)

Hi,

I am looking into implementing Cookieless formsauthentication. Can
someone guide me into the right direction:

1. How do you set the authentication ticket during the validation of
userid
and password
2. How do you include custom data (structure) in the ticket
3. How to verify if the user is authenticated on every subsequent
requests.
Thanks for all the help in advance.



.



Relevant Pages

  • Re: Using GSSAPI to Authenticate to AD
    ... I want to authenticate an Active Directory User using GSSAPI. ... ticket for that user available (Win32 SDK: ...
    (comp.protocols.kerberos)
  • Re: KERBEROS+SASL+OPENLDAP : login but no ticket
    ... a kinit to have a ticket (idem when I log in with ssh). ... Use pam_krb5 instead; it will authenticate ...
    (comp.protocols.kerberos)
  • Re: Kerberos and Solaris 9 problems
    ... Win 2000 ADS server with mixed results and was looking for some ... I can not authenticate with PAM to save my life (with any remote ... ticket, the server does an extra Kerberos exchange to prevent a KDC ... it acquires a host ticket for the local host. ...
    (comp.protocols.kerberos)
  • RE: Kerboros explain
    ... Note that you *can* get a service ticket when you authenticate. ... credentials (dependent on shared secrets between the KDC and each ... site's KDC, so it can issue you credentials to talk to one or more ...
    (comp.protocols.kerberos)
  • Re: newbie question on forms auth with custom data
    ... and so it must expire when the ticket does - so I was ... custom data in theauthticket and am very confused about how to do so. ... course the session and tickets don't expire at the same time...argh. ... and the prinicpal and encrypt/decrypting cookies and my head starts to ...
    (microsoft.public.dotnet.framework.aspnet)