Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > Forms authentication failed - ticket supplied has expired

Reply
Thread Tools

Forms authentication failed - ticket supplied has expired

 
 
Les Caudle
Guest
Posts: n/a
 
      07-19-2007
Running ASP.NET 2.0 on Windows 2003.

Getting events in App log for

Event code: 4005
Event message: Forms authentication failed for the request. Reason: The ticket
supplied has expired.

The page they are viewing doesn't even require a secure login.

Here's the config:

<authentication mode="Forms">
<forms name="WebAuth" loginUrl="login.aspx" protection="All" path="/"
timeout="525600"/>
</authentication>

The WebAuth cookie gets set to one year, the same as the timeout

How can I debug this problem?
--
Thanks in advance, Les Caudle
 
Reply With Quote
 
 
 
 
Steven Cheng[MSFT]
Guest
Posts: n/a
 
      07-19-2007
Hi Les,

From your description, in your ASP.NET 2.0 web application which use forms
authentication, it will report the following error,correct?
>>>>>>>>>>>

Event code: 4005
Event message: Forms authentication failed for the request. Reason: The
ticket
supplied has expired.
<<<<<<<<<<

As for the ticket expired issue, is it frequently occuring or just occur
after a long time or randomly? Also, is your ASP.NET web application hosted
as a webfarm model? Based on my quick research, there are some existing
issue with the similar symptom:

** When your ASP.NET application using Formsauthentitcation hosted in
webfarm environment, and if you haven't manually specify the machinekey,
the authentication ticket encrypted by one server will fail to be valid on
another server.


** Another possible scenario is when the forms authentication based
application has restart or recycle, then the previous generated ticket will
fail to be decrypted by the new application instance(since autogenerated
machinekey will vary between different application instance).

Here are two web articles you can refer to:

http://msmvps.com/blogs/omar/archive...20/108307.aspx

http://dotnetusergroup.com/blogs/oma...09/13/236.aspx

and to better understand how the forms authentication and its ticket works,
you can have a look at the following reference:

#Explained: Forms Authentication in ASP.NET 2.0
http://msdn2.microsoft.com/en-us/library/aa480476.aspx

#Understanding the Forms Authentication Ticket and Cookie
http://support.microsoft.com/kb/910443

Hope this helps.


Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead



==================================================

Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscripti...ult.aspx#notif
ications.



Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscripti...t/default.aspx.

==================================================


This posting is provided "AS IS" with no warranties, and confers no rights.







 
Reply With Quote
 
 
 
 
Walter Wang [MSFT]
Guest
Posts: n/a
 
      07-23-2007
Hi Les,

Steven is not in office for several days, so I will continue working with
you on this. Please feel free to let us know if there's anything unclear.
Thanks.

Regards,
Walter Wang ((E-Mail Removed), remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 
Reply With Quote
 
Les Caudle
Guest
Posts: n/a
 
      07-23-2007
Steven & Walter - the issue happens on a random basis. It happens on some pages
where authorization is not required.

The web is not part of a web farm and 'web garden - max # of worker processes'
is set to 1.

I did move the web site from an older server a week ago. Possibly this has
something to do with it?

I'm going to have to research the default appPool properties in IIS, and decide
if I should tamper with the defaults.

Thanks, Les Caudle


On Mon, 23 Jul 2007 02:44:49 GMT, http://www.velocityreviews.com/forums/(E-Mail Removed) (Walter Wang
[MSFT]) wrote:

>Hi Les,
>
>Steven is not in office for several days, so I will continue working with
>you on this. Please feel free to let us know if there's anything unclear.
>Thanks.
>
>Regards,
>Walter Wang ((E-Mail Removed), remove 'online.')
>Microsoft Online Community Support
>
>================================================= =
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>================================================= =
>
>This posting is provided "AS IS" with no warranties, and confers no rights.


 
Reply With Quote
 
Walter Wang [MSFT]
Guest
Posts: n/a
 
      07-25-2007
Hi Les,

How's the result after tweaking appPool's properties?

Regards,
Walter Wang ((E-Mail Removed), remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 
Reply With Quote
 
Les Caudle
Guest
Posts: n/a
 
      07-25-2007
Walter - I'm going to have to research that in the next few days. I don't want
to tamper and create a problem.

Is there a tech note that specifically outlines how to set that up, taking into
consideration the settings in the web.config & machine.config files?

I'm not even sure if this affects the user in any way. Maybe this happens
transparently to the user as I'm not getting any complaints? Session state is
not turned on, just using cookies and values passed in urls.

Thanks, Les Caudle

On Wed, 25 Jul 2007 11:37:28 GMT, (E-Mail Removed) (Walter Wang
[MSFT]) wrote:

>Hi Les,
>
>How's the result after tweaking appPool's properties?
>
>Regards,
>Walter Wang ((E-Mail Removed), remove 'online.')
>Microsoft Online Community Support
>
>================================================= =
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
>================================================= =
>
>This posting is provided "AS IS" with no warranties, and confers no rights.


 
Reply With Quote
 
Walter Wang [MSFT]
Guest
Posts: n/a
 
      07-26-2007
Hi Les,

In following article, there's a section "Forms Authentication Tickets":

#How To: Configure MachineKey in ASP.NET 2.0
http://msdn2.microsoft.com/en-us/library/ms998288.aspx

The first case Steven has mentioned doesn't apply here since you're not
using webfarm or web garden.

For the second case, you may log when your application is restarted and see
if the issues occurs after restarting.


Regards,
Walter Wang ((E-Mail Removed), remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 
Reply With Quote
 
Walter Wang [MSFT]
Guest
Posts: n/a
 
      07-31-2007
Hi Les,

I haven't heard from you recently.

I hope you understand that for such random and non-reproducible issues,
there's really not much we can do from newsgroup other than giving some
general suggestions and try if it works. For efficient troubleshooting, I
suggest you contact Microsoft Customer Support and Service. Thank you for
your understanding.


Regards,
Walter Wang ((E-Mail Removed), remove 'online.')
Microsoft Online Community Support

==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Forms authentication failed for the request. Reason: The ticket supplied has expired. Gibble ASP .Net 6 05-15-2007 02:23 PM
forms authentication -- expired forms cookie vs. not provided forms cookie Eric ASP .Net Security 2 01-27-2006 10:09 PM
Forms Authentication Ticket Functionality With Windows Authentication jfer ASP .Net Security 3 09-16-2005 06:30 PM
pysqlite2.dbapi2.ProgrammingError: Incorrect number of bindings supplied. The current statement uses 0, and there are -1 supplied. F. GEIGER Python 3 05-18-2005 03:46 PM
Authentication ticket, cookieless, forms authentication? Lauchlan M ASP .Net Security 0 10-01-2003 12:23 AM



Advertisments