Ask a Question related to ASP.NET Security, Design and Development.
-
Chris Huddle #1
Forms Auth cookie question
This may be a dumb question, but does anyone know where the Forms
Authentication cookie is kept on an XP box? It definitely isn't kept with
all of the other cookies in "Documents and Settings/Username/Cookies". I
know Microsoft recommends setting the path as "/" in the Web.config, but
where is that pointing to? Also, shouldn't the cookie be named what you
have it set to in the "Authentication" section of Web.config ? Can anyone
clarify this for me? Thanks!
Chris Huddle Guest
-
Forms Auth Info passed to Windows Auth?
The requirement is to build an ASP.Net intranet application, so external users can log in to the main web portal via forms authentication, using... -
Stupid Forms Auth Question
I'm new... please be gentle... I've built a login form for a very simple website using C#/ASP.NET. Security isn't that big of a deal, so I'm... -
Forms Auth and FormsAuthentication.SignOut()Question
I'm using Form Auth. I 'm using the FormsAuthentication.SignOut() to sign out But when the user logins in and later logs out using... -
Forms Auth with ADirectory Question
I tried out the code at:- http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnnetse c/html/SecNetHT02.asp But i'm getting the... -
Forms Auth Redirect on Access Denied - Question/Help
If a web app uses forms authentication and a specific aspx page has a role authorization, where should a browser be directed if a user is not in... -
mortb #2
Re: Forms Auth cookie question
The cookie is definatley located in the Documents and
Settings/Username/Cookies folder
(except if your browser isn't IE then it is located somwhere else)
But cookies lead a strange life :)
If you delete a cookie while surfing it is still set -- you'll have to close
down your browser and delete it to be sure it isn't seet.
The cookie file is typically named <yourUserName>@<yourServer>[x] where the
name yourServer is dependent on which namne you used to access your server
(it may be localhost, it may be the IP number or it may be the computername)
and x if present is a number.
The name of the cookie is kept _within_ the file -- if your site sets
several cookies with different names they are all kept within the same file
as the file is one per visited server. If you open a file you'll be able to
see the cookie names.
Hope this helps
cheers,
mortb
"Chris Huddle" <chuddle@timeplus.com> wrote in message
news:O5s4LOw1EHA.1188@tk2msftngp13.phx.gbl...> This may be a dumb question, but does anyone know where the Forms
> Authentication cookie is kept on an XP box? It definitely isn't kept with
> all of the other cookies in "Documents and Settings/Username/Cookies". I
> know Microsoft recommends setting the path as "/" in the Web.config, but
> where is that pointing to? Also, shouldn't the cookie be named what you
> have it set to in the "Authentication" section of Web.config ? Can anyone
> clarify this for me? Thanks!
>
mortb Guest



Reply With Quote

