[Mono-bugs] [Bug 75635][Maj] New - autologin (FormsAuthentication) does not work after XSP restart

[bugzilla-daemon at bugzilla.ximian.com]

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by schwimmlehrer at hotmail.com.

http://bugzilla.ximian.com/show_bug.cgi?id=75635

--- shadow/75635	2005-07-26 05:46:07.000000000 -0400
+++ shadow/75635.tmp.7899	2005-07-26 05:46:07.000000000 -0400
@@ -0,0 +1,46 @@
+Bug#: 75635
+Product: Mono: Class Libraries
+Version: 1.1
+OS: Windows XP
+OS Details: 
+Status: NEW   
+Resolution: 
+Severity: Unknown
+Priority: Major
+Component: Sys.Web
+AssignedTo: mono-bugs at ximian.com                            
+ReportedBy: schwimmlehrer at hotmail.com               
+QAContact: mono-bugs at ximian.com
+TargetMilestone: ---
+URL: 
+Cc: 
+Summary: autologin (FormsAuthentication) does not work after XSP restart
+
+Description of Problem:
+Autologin verification fails after restarting the XSP server.
+
+Steps to reproduce the problem:
+1. select SHA1 validation and provide decryptionKey in web.config (see
+attachment)
+2. Login to web application (using
+FormsAuthentication.RedirectFromLoginPage ("myname", true);)
+3. restart XSP
+4. go to index page
+
+Actual Results:
+Login Page is displayed again instead of index page (Validation fails in
+FormsAuthentication.cs:Descrypt2).
+
+Expected Results:
+Index page is displayed and the user is automatically logged in.
+
+How often does this happen? 
+Always
+
+Additional Information:
+The init_vector in FormsAuthentication.cs is initialized with every
+application restart. When using a constant instead of a random value it
+works. I have created a simple application to test the
+TripleDESCryptoServiceProvider with several init_vectors to be sure that
+the init_vector is the problem (see attachment). I wonder how MS does it to
+create a different encrypted key every time.