Forms Auth cookie question

Ask a Question related to ASP.NET Security, Design and Development.

  1. #1

    Default Forms Auth cookie question

    This may be a dumb question, but does anyone know where the Forms
    Authentication cookie is kept on an XP box? It definitely isn't kept with
    all of the other cookies in "Documents and Settings/Username/Cookies". I
    know Microsoft recommends setting the path as "/" in the Web.config, but
    where is that pointing to? Also, shouldn't the cookie be named what you
    have it set to in the "Authentication" section of Web.config ? Can anyone
    clarify this for me? Thanks!


    Chris Huddle Guest

  2. Similar Questions and Discussions

    1. Forms Auth Info passed to Windows Auth?
      The requirement is to build an ASP.Net intranet application, so external users can log in to the main web portal via forms authentication, using...
    2. Stupid Forms Auth Question
      I'm new... please be gentle... I've built a login form for a very simple website using C#/ASP.NET. Security isn't that big of a deal, so I'm...
    3. Forms Auth and FormsAuthentication.SignOut()Question
      I'm using Form Auth. I 'm using the FormsAuthentication.SignOut() to sign out But when the user logins in and later logs out using...
    4. Forms Auth with ADirectory Question
      I tried out the code at:- http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetse c/html/SecNetHT02.asp But i'm getting the...
    5. Forms Auth Redirect on Access Denied - Question/Help
      If a web app uses forms authentication and a specific aspx page has a role authorization, where should a browser be directed if a user is not in...
  3. #2

    Default Re: Forms Auth cookie question

    The cookie is definatley located in the Documents and
    Settings/Username/Cookies folder
    (except if your browser isn't IE then it is located somwhere else)
    But cookies lead a strange life :)
    If you delete a cookie while surfing it is still set -- you'll have to close
    down your browser and delete it to be sure it isn't seet.
    The cookie file is typically named <yourUserName>@<yourServer>[x] where the
    name yourServer is dependent on which namne you used to access your server
    (it may be localhost, it may be the IP number or it may be the computername)
    and x if present is a number.
    The name of the cookie is kept _within_ the file -- if your site sets
    several cookies with different names they are all kept within the same file
    as the file is one per visited server. If you open a file you'll be able to
    see the cookie names.

    Hope this helps

    cheers,
    mortb

    "Chris Huddle" <chuddle@timeplus.com> wrote in message
    news:O5s4LOw1EHA.1188@tk2msftngp13.phx.gbl...
    > This may be a dumb question, but does anyone know where the Forms
    > Authentication cookie is kept on an XP box? It definitely isn't kept with
    > all of the other cookies in "Documents and Settings/Username/Cookies". I
    > know Microsoft recommends setting the path as "/" in the Web.config, but
    > where is that pointing to? Also, shouldn't the cookie be named what you
    > have it set to in the "Authentication" section of Web.config ? Can anyone
    > clarify this for me? Thanks!
    >

    mortb Guest

Posting Permissions

  • You may not post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139