[Mono-list] Current state of FormsAuthentication

Hubert FONGARNAND informatique.internet@fiducial.fr
Tue, 8 Mar 2005 12:01:11 +0100


Le Mardi 08 Mars 2005 09:50, Ilya Kharmatsky a =E9crit=A0:
> Hi, Hubert!
> See comeents below.
>
> Hubert FONGARNAND wrote:
> >Since about a week, i've problems with FormsAuthentication...
> >I'm using not persistent FormsAuthenticationTicket... I've apply your
> > patch... and it works only with XSP...
>
> Let me clearify the problem - the patch caused to regressions on apache=

> and mod_mono? Or it just didn't resolve problem on those servers?
>
In fact your patch has resolved my problem only if I use the XSP web serv=
er
if I use apache and mod_mono, it doesn't work... (never authenticated)...=


> >With apache and mod_mono, i'm never authenticated...
> >I've another problem with XSP:
> >-	With formauthentication enabled, i can't access to images or static =
html
> >pages without beeing authenticated... With a normal (.NET) behaviour
> >only .aspx pages are protected...
> >
> >Thanks...
> >
> >Le Dimanche 06 Mars 2005 17:49, Ilya Kharmatsky a =E9crit :
> >>Hi!
> >>
> >>We found regression in latest version of Forms Authentication - in ca=
se
> >>when the FormsAuthenticationTicket is not persistent (created with
> >>FormsAuthentication.SetAuthCookie("userName", false))
> >>the HttpRequest.IsAuthenticated will return false.
> >>
> >>Attached possible patch (in FormsAuthenticationModule.cs) and test ca=
se.
> >>
> >>Thanks,
> >>Ilya Kharmatsky.
> >>
> >>Gonzalo Paniagua Javier wrote:
> >>>On Wed, 2005-03-02 at 11:45 -0700, Jesse Pasichnyk wrote:
> >>>>I am working on developing an ecommerce site with mono/postgres and=
 am
> >>>>having some issues with the a Forms based security login area.
> >>>
> >>>Last mono release shipped with a regression that might make
> >>>FormsAuthentication fail.
> >>>
> >>>You can get a new System.Web.dll from
> >>>http://www.go-mono.com/archive/1.0.6/System.Web.dll or
> >>>http://www.go-mono.com/archive/1.1.4/System.Web.dll
> >>>
> >>>-Gonzalo
> >>>
> >>>
> >>>_______________________________________________
> >>>Mono-list maillist  -  Mono-list@lists.ximian.com
> >>>http://lists.ximian.com/mailman/listinfo/mono-list
> >
> >_______________________________________________
> >Mono-list maillist  -  Mono-list@lists.ximian.com
> >http://lists.ximian.com/mailman/listinfo/mono-list
_______________________________________________
Ce message et les =E9ventuels documents joints peuvent contenir des infor=
mations confidentielles.
Au cas o=F9 il ne vous serait pas destin=E9, nous vous remercions de bien=
 vouloir le supprimer et en aviser imm=E9diatement l'exp=E9diteur. Toute =
utilisation de ce message non conforme =E0 sa destination, toute diffusio=
n ou publication, totale ou partielle et quel qu'en soit le moyen est for=
mellement interdite.
Les communications sur internet n'=E9tant pas s=E9curis=E9es, l'int=E9gri=
t=E9 de ce message n'est pas assur=E9e et la soci=E9t=E9 =E9mettrice ne p=
eut =EAtre tenue pour responsable de son contenu.