ASP .NET - Forms authentication failed - ticket supplied has expired

Author

Forms authentication failed - ticket supplied has expired

Les Caudle

2007-07-18, 10:09 pm

Running ASP.NET 2.0 on Windows 2003.

Getting events in App log for

Event code: 4005
Event message: Forms authentication failed for the request. Reason: The ticket
supplied has expired.

The page they are viewing doesn't even require a secure login.

Here's the config:

<authentication mode="Forms">
<forms name="WebAuth" loginUrl="login.aspx" protection="All" path="/"
timeout="525600"/>
</authentication>

The WebAuth cookie gets set to one year, the same as the timeout

How can I debug this problem?
--
Thanks in advance, Les Caudle

Steven Cheng[MSFT]

2007-07-19, 4:22 am

Hi Les,

From your description, in your ASP.NET 2.0 web application which use forms
authentication, it will report the following error,correct?[color=darkred]
Event code: 4005
Event message: Forms authentication failed for the request. Reason: The
ticket
supplied has expired.
<<<<<<<<<<

As for the ticket expired issue, is it frequently occuring or just occur
after a long time or randomly? Also, is your ASP.NET web application hosted
as a webfarm model? Based on my quick research, there are some existing
issue with the similar symptom:

** When your ASP.NET application using Formsauthentitcation hosted in
webfarm environment, and if you haven't manually specify the machinekey,
the authentication ticket encrypted by one server will fail to be valid on
another server.

** Another possible scenario is when the forms authentication based
application has restart or recycle, then the previous generated ticket will
fail to be decrypted by the new application instance(since autogenerated
machinekey will vary between different application instance).

Here are two web articles you can refer to:

http://msmvps.com/blogs/omar/archiv.../20/108307.aspx

http://dotnetusergroup.com/blogs/om.../09/13/236.aspx

and to better understand how the forms authentication and its ticket works,
you can have a look at the following reference:

#Explained: Forms Authentication in ASP.NET 2.0
http://msdn2.microsoft.com/en-us/library/aa480476.aspx

#Understanding the Forms Authentication Ticket and Cookie
http://support.microsoft.com/kb/910443

Hope this helps.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead

========================================
==========

Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscript...ault.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscript...t/default.aspx.

========================================
==========

This posting is provided "AS IS" with no warranties, and confers no rights.

Walter Wang [MSFT]

2007-07-22, 10:11 pm

Hi Les,

Steven is not in office for several days, so I will continue working with
you on this. Please feel free to let us know if there's anything unclear.
Thanks.

Regards,
Walter Wang (wawang@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

========================================
==========
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
==========

This posting is provided "AS IS" with no warranties, and confers no rights.

Les Caudle

2007-07-23, 7:11 pm

Steven & Walter - the issue happens on a random basis. It happens on some pages
where authorization is not required.

The web is not part of a web farm and 'web garden - max # of worker processes'
is set to 1.

I did move the web site from an older server a w

ago. Possibly this has
something to do with it?

I'm going to have to research the default appPool properties in IIS, and decide
if I should tamper with the defaults.

Thanks, Les Caudle

On Mon, 23 Jul 2007 02:44:49 GMT, wawang@online.microsoft.com (Walter Wang
[MSFT]) wrote:

>Hi Les,
>
>Steven is not in office for several days, so I will continue working with
>you on this. Please feel free to let us know if there's anything unclear.
>Thanks.
>
>Regards,
>Walter Wang (wawang@online.microsoft.com, remove 'online.')
>Microsoft Online Community Support
>
> ========================================
==========
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
> ========================================
==========
>
>This posting is provided "AS IS" with no warranties, and confers no rights.

Walter Wang [MSFT]

2007-07-25, 8:08 am

Hi Les,

How's the result after tweaking appPool's properties?

Regards,
Walter Wang (wawang@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

========================================
==========
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
==========

This posting is provided "AS IS" with no warranties, and confers no rights.

Les Caudle

2007-07-25, 7:11 pm

Walter - I'm going to have to research that in the next few days. I don't want
to tamper and create a problem.

Is there a tech note that specifically outlines how to set that up, taking into
consideration the settings in the web.config & machine.config files?

I'm not even sure if this affects the user in any way. Maybe this happens
transparently to the user as I'm not getting any complaints? Session state is
not turned on, just using cookies and values passed in urls.

Thanks, Les Caudle

On Wed, 25 Jul 2007 11:37:28 GMT, wawang@online.microsoft.com (Walter Wang
[MSFT]) wrote:

>Hi Les,
>
>How's the result after tweaking appPool's properties?
>
>Regards,
>Walter Wang (wawang@online.microsoft.com, remove 'online.')
>Microsoft Online Community Support
>
> ========================================
==========
>When responding to posts, please "Reply to Group" via your newsreader so
>that others may learn and benefit from your issue.
> ========================================
==========
>
>This posting is provided "AS IS" with no warranties, and confers no rights.

Walter Wang [MSFT]

2007-07-26, 8:09 am

Hi Les,

In following article, there's a section "Forms Authentication Tickets":

#How To: Configure MachineKey in ASP.NET 2.0
http://msdn2.microsoft.com/en-us/library/ms998288.aspx

The first case Steven has mentioned doesn't apply here since you're not
using webfarm or web garden.

For the second case, you may log when your application is restarted and see
if the issues occurs after restarting.

Regards,
Walter Wang (wawang@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

========================================
==========
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
==========

This posting is provided "AS IS" with no warranties, and confers no rights.

Walter Wang [MSFT]

2007-07-31, 4:23 am

Hi Les,

I haven't heard from you recently.

I hope you understand that for such random and non-reproducible issues,
there's really not much we can do from newsgroup other than giving some
general suggestions and try if it works. For efficient troubleshooting, I
suggest you contact Microsoft Customer Support and Service. Thank you for
your understanding.

Regards,
Walter Wang (wawang@online.microsoft.com, remove 'online.')
Microsoft Online Community Support

========================================
==========
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
========================================
==========

This posting is provided "AS IS" with no warranties, and confers no rights.

Sponsored Links