Forms authentication fails after installing IIS 7.5

re: Forms authentication fails after installing IIS 7.5

About form authentication accross IIS web sites — Thu, 19 Apr 2012 01:51:43 GMT

Hi, I configured my application pools with same identity. The form authentication is OK when my application running in win32 mode on Windows 2008 R2 machine. But it does not work when my application running with x64 mode on Windows 2008 R2 x64 machine.

I checked the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\2.0.50727.0\AutoGenKeys, the key was not created. And I changed the identity of application pools to a user in Administrator group, the key will be created, the form authentication is OK.

I think this should be permission issue for the identity. But I could not find what are the minimum rights for the identity. I have assigned full control for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ASP.NET\2.0.50727.0\AutoGenKeys, but it still does not work.

Could you give me some suggestions?

re: Forms authentication fails after installing IIS 7.5

Barry — Fri, 13 Jan 2012 02:40:51 GMT

Same problem as Matt and Douglas. Outer app is .Net 2.0, child app is 4.0 Further details of problem here: stackoverflow.com/.../can-an-asp-net-4-0-application-within-an-asp-net-2-0-site-use-the-same-forms-aut

re: Forms authentication fails after installing IIS 7.5

Douglas — Thu, 16 Jun 2011 05:13:31 GMT

Yeah... same problem as Matt Duguid. We have two apps, each running on different app pools, same identity, same machine keys.

Maybe it is because one pool is .Net 2.0 and the other is 4.0?

re: Forms authentication fails after installing IIS 7.5

Matt Duguid — Tue, 12 Apr 2011 00:09:48 GMT

So we have the same issue when moving an app from IIS 7.0 to IIS 7.5 but we have a *manually* generated machine key in the web.config of the application which is the same on each of the 4 servers. Session state is held on a SQL Server. When using the application we constantly get the following error as we bounce between servers via the load balancer,

Event code: 4005

Event message: Forms authentication failed for the request. Reason: The ticket supplied was invalid.

We believe we've met all requirements for servers in this configuration but fail to see why this keeps erroring. Any ideas appreciated on troubleshooting or resolving this issue.

re: Forms authentication fails after installing IIS 7.5

Tess1 — Fri, 08 Jan 2010 08:05:34 GMT

Mike,

Yepp, that would be the way to go... the apppool user is an auto generated account so you can't really use it for much else.

re: Forms authentication fails after installing IIS 7.5

MikeT — Mon, 21 Dec 2009 22:05:17 GMT

I realize that I could create my own account to run everything under, but it seems like being able to use the apppool account for everything would be cleaner.

re: Forms authentication fails after installing IIS 7.5

MikeT — Mon, 21 Dec 2009 22:03:02 GMT

If you have one app that is hosted in IIS 7 running under an IIS APPPOOL account is there a way to make a windows service run under that account so they can use common keys? I've tried without any luck. If its not possible, can you explain why? I'm far from a security guru so its not obvious why that wouldn't work. I can give the app pool account access to the aspnetdb database in sql server, but I can't set a windows service to run under it.

re: Forms authentication fails after installing IIS 7.5

roelof — Mon, 12 Oct 2009 07:00:33 GMT

Why does it write something 'user-related' to HKLM instead of to HKCU?

If it is something that contains the user credential anyway, HKLM is not the best place imho. Ok, you cannot change that (microsoft has to), I know, but perhaps ask them to 'bug fix' .

re: Forms authentication fails after installing IIS 7.5

Kev — Thu, 17 Sep 2009 14:34:30 GMT

That linky to my blog entry is broken (dasBlog permalink fail). This is a better one:

http://blog.zygonia.net/2006/10/26/ASPNET20AspnetregiisGaSwitch.aspx

Kev

re: Forms authentication fails after installing IIS 7.5

Mahesh Velaga — Thu, 17 Sep 2009 10:29:52 GMT

Nice post .. :)

Thanks for pointing out the difference in IIS 7 and IIS 7+

Thanks,

Mahesh.