forms authentication ticket expiration problem

[tparks69]

I have set up forms based authentication according to the KB article
([url]http://support.microsoft.com/kb/308157/EN-US/[/url]) using the
FormsAuthenticationTicket based method. I have the timeout parameter set to
"2" in web.config, and also in the code that creates the ticket. When I
refresh default.aspx after waiting 2 minutes, I should get bounced back to
loginform.aspx, but it doesn't happen. Can anyone tell me why? Code below:

From web.config:
*************
<authentication mode="Forms">
<forms name="MyApp011" path="/" loginUrl="LoginForm.aspx"
protection="All" timeout="2"></forms>
</authentication>
<authorization>
<deny users="?" />
</authorization>

*************

From loginform.aspx:
****************
tkt = New FormsAuthenticationTicket(1, txtUserId.Value, DateTime.Now(), _
DateTime.Now.AddMinutes(2), chkPersistCookie.Checked, "your
custom data")
cookiestr = FormsAuthentication.Encrypt(tkt)
ck = New HttpCookie(FormsAuthentication.FormsCookieName(),
cookiestr)
If (chkPersistCookie.Checked) Then ck.Expires = tkt.Expiration
ck.Path = FormsAuthentication.FormsCookiePath()
Response.Cookies.Add(ck)
***************

Any suggestions greatly appreciated.

Tom

[PL]

Try setting slidingExpiration="false" in the <forms ..>

PL.


"tparks69" <tparks69@discussions.microsoft.com> skrev i meddelandet news:93AF4BEE-A9DE-4353-BF9A-51324665F9F4@microsoft.com...

>I have set up forms based authentication according to the KB article
> ([url]http://support.microsoft.com/kb/308157/EN-US/[/url]) using the
> FormsAuthenticationTicket based method. I have the timeout parameter set to
> "2" in web.config, and also in the code that creates the ticket. When I
> refresh default.aspx after waiting 2 minutes, I should get bounced back to
> loginform.aspx, but it doesn't happen. Can anyone tell me why? Code below:
>
> From web.config:
> *************
> <authentication mode="Forms">
> <forms name="MyApp011" path="/" loginUrl="LoginForm.aspx"
> protection="All" timeout="2"></forms>
> </authentication>
> <authorization>
> <deny users="?" />
> </authorization>
>
> *************
>
> From loginform.aspx:
> ****************
> tkt = New FormsAuthenticationTicket(1, txtUserId.Value, DateTime.Now(), _
> DateTime.Now.AddMinutes(2), chkPersistCookie.Checked, "your
> custom data")
> cookiestr = FormsAuthentication.Encrypt(tkt)
> ck = New HttpCookie(FormsAuthentication.FormsCookieName(),
> cookiestr)
> If (chkPersistCookie.Checked) Then ck.Expires = tkt.Expiration
> ck.Path = FormsAuthentication.FormsCookiePath()
> Response.Cookies.Add(ck)
> ***************
>
> Any suggestions greatly appreciated.
>
> Tom

[tparks69]

That seems to have done it. Thanks!

"PL" wrote:

>
>
> Try setting slidingExpiration="false" in the <forms ..>
>
> PL.
>
>
> "tparks69" <tparks69@discussions.microsoft.com> skrev i meddelandet news:93AF4BEE-A9DE-4353-BF9A-51324665F9F4@microsoft.com...

> >I have set up forms based authentication according to the KB article
> > ([url]http://support.microsoft.com/kb/308157/EN-US/[/url]) using the
> > FormsAuthenticationTicket based method. I have the timeout parameter set to
> > "2" in web.config, and also in the code that creates the ticket. When I
> > refresh default.aspx after waiting 2 minutes, I should get bounced back to
> > loginform.aspx, but it doesn't happen. Can anyone tell me why? Code below:
> >
> > From web.config:
> > *************
> > <authentication mode="Forms">
> > <forms name="MyApp011" path="/" loginUrl="LoginForm.aspx"
> > protection="All" timeout="2"></forms>
> > </authentication>
> > <authorization>
> > <deny users="?" />
> > </authorization>
> >
> > *************
> >
> > From loginform.aspx:
> > ****************
> > tkt = New FormsAuthenticationTicket(1, txtUserId.Value, DateTime.Now(), _
> > DateTime.Now.AddMinutes(2), chkPersistCookie.Checked, "your
> > custom data")
> > cookiestr = FormsAuthentication.Encrypt(tkt)
> > ck = New HttpCookie(FormsAuthentication.FormsCookieName(),
> > cookiestr)
> > If (chkPersistCookie.Checked) Then ck.Expires = tkt.Expiration
> > ck.Path = FormsAuthentication.FormsCookiePath()
> > Response.Cookies.Add(ck)
> > ***************
> >
> > Any suggestions greatly appreciated.
> >
> > Tom

>
>
>