Forms authentication failed - ticket supplied has expired - DOTNET

This is a discussion on Forms authentication failed - ticket supplied has expired - DOTNET ; Running ASP.NET 2.0 on Windows 2003. Getting events in App log for Event code: 4005 Event message: Forms authentication failed for the request. Reason: The ticket supplied has expired. The page they are viewing doesn't even require a secure login. ...

+ Reply to Thread
Results 1 to 8 of 8

Forms authentication failed - ticket supplied has expired

  1. Default Forms authentication failed - ticket supplied has expired

    Running ASP.NET 2.0 on Windows 2003.

    Getting events in App log for

    Event code: 4005
    Event message: Forms authentication failed for the request. Reason: The ticket
    supplied has expired.

    The page they are viewing doesn't even require a secure login.

    Here's the config:

    <authentication mode="Forms">
    <forms name="WebAuth" loginUrl="login.aspx" protection="All" path="/"
    timeout="525600"/>
    </authentication>

    The WebAuth cookie gets set to one year, the same as the timeout

    How can I debug this problem?
    --
    Thanks in advance, Les Caudle

  2. Default RE: Forms authentication failed - ticket supplied has expired

    Hi Les,

    From your description, in your ASP.NET 2.0 web application which use forms
    authentication, it will report the following error,correct?
    >>>>>>>>>>>

    Event code: 4005
    Event message: Forms authentication failed for the request. Reason: The
    ticket
    supplied has expired.
    <<<<<<<<<<

    As for the ticket expired issue, is it frequently occuring or just occur
    after a long time or randomly? Also, is your ASP.NET web application hosted
    as a webfarm model? Based on my quick research, there are some existing
    issue with the similar symptom:

    ** When your ASP.NET application using Formsauthentitcation hosted in
    webfarm environment, and if you haven't manually specify the machinekey,
    the authentication ticket encrypted by one server will fail to be valid on
    another server.


    ** Another possible scenario is when the forms authentication based
    application has restart or recycle, then the previous generated ticket will
    fail to be decrypted by the new application instance(since autogenerated
    machinekey will vary between different application instance).

    Here are two web articles you can refer to:

    http://msmvps.com/blogs/omar/archive...20/108307.aspx

    http://dotnetusergroup.com/blogs/oma...09/13/236.aspx

    and to better understand how the forms authentication and its ticket works,
    you can have a look at the following reference:

    #Explained: Forms Authentication in ASP.NET 2.0
    http://msdn2.microsoft.com/en-us/library/aa480476.aspx

    #Understanding the Forms Authentication Ticket and Cookie
    http://support.microsoft.com/kb/910443

    Hope this helps.


    Sincerely,

    Steven Cheng

    Microsoft MSDN Online Support Lead



    ==================================================

    Get notification to my posts through email? Please refer to
    http://msdn.microsoft.com/subscripti...ult.aspx#notif
    ications.



    Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
    where an initial response from the community or a Microsoft Support
    Engineer within 1 business day is acceptable. Please note that each follow
    up response may take approximately 2 business days as the support
    professional working with you may need further investigation to reach the
    most efficient resolution. The offering is not appropriate for situations
    that require urgent, real-time or phone-based interactions or complex
    project ****ysis and dump ****ysis issues. Issues of this nature are best
    handled working with a dedicated Microsoft Support Engineer by contacting
    Microsoft Customer Support Services (CSS) at
    http://msdn.microsoft.com/subscripti...t/default.aspx.

    ==================================================


    This posting is provided "AS IS" with no warranties, and confers no rights.








  3. Default RE: Forms authentication failed - ticket supplied has expired

    Hi Les,

    Steven is not in office for several days, so I will continue working with
    you on this. Please feel free to let us know if there's anything unclear.
    Thanks.

    Regards,
    Walter Wang (wawang@online.microsoft.com, remove 'online.')
    Microsoft Online Community Support

    ==================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ==================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.


  4. Default Re: Forms authentication failed - ticket supplied has expired

    Steven & Walter - the issue happens on a random basis. It happens on some pages
    where authorization is not required.

    The web is not part of a web farm and 'web garden - max # of worker processes'
    is set to 1.

    I did move the web site from an older server a week ago. Possibly this has
    something to do with it?

    I'm going to have to research the default appPool properties in IIS, and decide
    if I should tamper with the defaults.

    Thanks, Les Caudle


    On Mon, 23 Jul 2007 02:44:49 GMT, wawang@online.microsoft.com (Walter Wang
    [MSFT]) wrote:

    >Hi Les,
    >
    >Steven is not in office for several days, so I will continue working with
    >you on this. Please feel free to let us know if there's anything unclear.
    >Thanks.
    >
    >Regards,
    >Walter Wang (wawang@online.microsoft.com, remove 'online.')
    >Microsoft Online Community Support
    >
    >==================================================
    >When responding to posts, please "Reply to Group" via your newsreader so
    >that others may learn and benefit from your issue.
    >==================================================
    >
    >This posting is provided "AS IS" with no warranties, and confers no rights.



  5. Default Re: Forms authentication failed - ticket supplied has expired

    Hi Les,

    How's the result after tweaking appPool's properties?

    Regards,
    Walter Wang (wawang@online.microsoft.com, remove 'online.')
    Microsoft Online Community Support

    ==================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ==================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.


  6. Default Re: Forms authentication failed - ticket supplied has expired

    Walter - I'm going to have to research that in the next few days. I don't want
    to tamper and create a problem.

    Is there a tech note that specifically outlines how to set that up, taking into
    consideration the settings in the web.config & machine.config files?

    I'm not even sure if this affects the user in any way. Maybe this happens
    transparently to the user as I'm not getting any complaints? Session state is
    not turned on, just using cookies and values passed in urls.

    Thanks, Les Caudle

    On Wed, 25 Jul 2007 11:37:28 GMT, wawang@online.microsoft.com (Walter Wang
    [MSFT]) wrote:

    >Hi Les,
    >
    >How's the result after tweaking appPool's properties?
    >
    >Regards,
    >Walter Wang (wawang@online.microsoft.com, remove 'online.')
    >Microsoft Online Community Support
    >
    >==================================================
    >When responding to posts, please "Reply to Group" via your newsreader so
    >that others may learn and benefit from your issue.
    >==================================================
    >
    >This posting is provided "AS IS" with no warranties, and confers no rights.



  7. Default Re: Forms authentication failed - ticket supplied has expired

    Hi Les,

    In following article, there's a section "Forms Authentication Tickets":

    #How To: Configure MachineKey in ASP.NET 2.0
    http://msdn2.microsoft.com/en-us/library/ms998288.aspx

    The first case Steven has mentioned doesn't apply here since you're not
    using webfarm or web garden.

    For the second case, you may log when your application is restarted and see
    if the issues occurs after restarting.


    Regards,
    Walter Wang (wawang@online.microsoft.com, remove 'online.')
    Microsoft Online Community Support

    ==================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ==================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.


  8. Default Re: Forms authentication failed - ticket supplied has expired

    Hi Les,

    I haven't heard from you recently.

    I hope you understand that for such random and non-reproducible issues,
    there's really not much we can do from newsgroup other than giving some
    general suggestions and try if it works. For efficient troubleshooting, I
    suggest you contact Microsoft Customer Support and Service. Thank you for
    your understanding.


    Regards,
    Walter Wang (wawang@online.microsoft.com, remove 'online.')
    Microsoft Online Community Support

    ==================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ==================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.


+ Reply to Thread

Similar Threads

  1. Cache Authentication vs Forms Authentication - Thoughts?
    By Application Development in forum DOTNET
    Replies: 4
    Last Post: 11-25-2007, 11:22 PM
  2. Replies: 1
    Last Post: 11-13-2007, 02:35 PM
  3. Replies: 1
    Last Post: 11-12-2007, 02:00 PM
  4. Mixing windows authentication and forms authentication
    By Application Development in forum Sharepoint
    Replies: 2
    Last Post: 10-12-2006, 11:19 AM
  5. [Commerce Server 2002] Authentication problem on Win2003 --- losing Auth ticket
    By Application Development in forum Commerce server
    Replies: 1
    Last Post: 07-08-2005, 11:39 AM