[Mono-bugs] [Bug 73073][Maj] Changed - Forms authentication fails - User is always logged in !

[bugzilla-daemon at bugzilla.ximian.com]

Please do not reply to this email- if you want to comment on the bug, go to the
URL shown below and enter your comments there.

Changed by pommes at teleos-web.de.

http://bugzilla.ximian.com/show_bug.cgi?id=73073

--- shadow/73073	2005-02-28 21:00:25.000000000 -0500
+++ shadow/73073.tmp.24647	2005-05-14 15:37:46.000000000 -0400
@@ -1,13 +1,13 @@
 Bug#: 73073
 Product: Mono: Tools
 Version: 1.1
 OS: unknown
 OS Details: Linux FC 3
-Status: RESOLVED   
-Resolution: FIXED
+Status: REOPENED   
+Resolution: 
 Severity: Unknown
 Priority: Major
 Component: XSP
 AssignedTo: gonzalo at ximian.com                            
 ReportedBy: pommes at teleos-web.de               
 QAContact: mono-bugs at ximian.com
@@ -104,6 +104,35 @@
 to be NOTABUG after testing xsp standalone under MS runtime.
 
 This issue is now fixed in SVN 1-0 and HEAD.
 
 Thanks.
 
+
+------- Additional Comments From pommes at teleos-web.de  2005-05-14 15:37 -------
+Hi again, 
+it seems the problem is not solved completly in 1.1.7 .
+The authentication form is showing up but the authentication ticket
+never expires. 
+
+I ported my source from the 1.05 tree to the current release (1.1.7).
+Using this config under 1.0.5 let the ticket expire after 30 minutes
+of inactivity:
+
+<?xml version="1.0" encoding="UTF-8" ?>
+<configuration>
+  <system.web>
+    <authentication mode="Forms">
+      <forms name=".CRM"  loginUrl="login.aspx"
+      timeout="30"
+      protection="All"
+      slidingExpiration="true">
+      </forms>
+    </authentication>  
+    <authorization>
+      <deny users="?" /> 
+    </authorization>
+</system.web>
+</configuration>
+
+
+Under 1.1.7 the ticket never expires !