Last post May 09, 2011 05:36 AM by sirdneo
May 04, 2011 05:57 PM|raywang|LINK
Hi, the users on my websites are randomly logged out when they navigate through pages. It's taken me days to research, but still no luck. Hope someone here could give some idea.
My problem is a little complicated, but I'll try my best to explain below.
We have developed an login system that allows user to be automatically logged in to all the websites if they have logged in to any one of our websites (we have 18 websites, and they are not subdomains). We have used a third party cookie for authentication
between those websites.
All websites are hosted on a webfarm. we also use F5 to do the caching, load balance, and using Big-IP (not really sure what this means).
validationkey is not set to AutoGenerate,IsolateApps.
Anyone know what could be the possible cause of my problem.
Thanks very mucy
May 08, 2011 11:50 PM|Zizhuoye Chen - MSFT|LINK
I'm not sure how the third party cookie works for your web application in web farm. But by default, if machine key doesn't match on each web server, the authentication tichet in cookie can not be able to decrypt and authenticate the user. So I think you
should ensure that the configuration files on each server share the same value for validationKey and decryptionKey.
Confiugure Machine Key:
Also, since there are many changes if we use web farm. This is required because we cannot guarantee which server will handle successive requests. Cache, session will also be the case. Maybe you can have a look at these links for some points to host web application
in web farms.
Hope this can help you.
May 09, 2011 05:36 AM|sirdneo|LINK
There are two main reasons for that, you do not have defined machine key in all server's web.config file or you are using inproc as session mode and you have to use state server for that. For details of configuring state server and machine key see this article:-