Logging in a user onto one site logs out a user on another!

I am building a CMS application. All is on one computer during development using Visual Web Developer 2008 Express Edition and Windows XP Professional.

Simply, I have one set of pages and each website's domain name points to the same pages, which load different data from the database, depending on the domain name.

I am using the membership and roles framework but have left the applicationName blank in the roleManager and membership providers so that, as authenticated users create an account, a different applicationID is created for each domain name.  This way, the users and roles are segrated into their own applications and the same usernames and role names can be used in different applications.

I have set up two domain names, one.com and two.com, with one user account on each but no roles.  I open both in separate browser windows in IE7, login the user on one.com and then log in the user on two.com.  When I return to one.com and refresh the page the user has logged out!

I get the same problem if I open both domains in Firefox.

If I open another instance of IE7, or use Firefox, for one of the domain names, I don't have a problem.

Any help much appreciated.

Thanking you in anticipation.


11/17/2008 7:48:08 PM
asp.net.security 27051 articles. 1 followers. Follow

2 Replies

Similar Articles

[PageSpeed] 56
Get it on Google Play
Get it on Apple App Store

The Forms Authentication Ticket that is received as a proof of a login is stored as a cookie on the user's computer.

If You then login twice using the same browser, the two browser instances will fight each other over that cookie and You will see a number of strange behaviours.

You can find a forum post about how to do it in Firefox here: http://forums.mozillazine.org/viewtopic.php?f=8&t=916705 .

It is a pretty extreme behaviour that the user should be able to be logged in twice with same browser, so if this is not a specific requirement from your customer, I wouldn't spend more time investigating it further if I were You.

Andreas Paulsson
Software Developer
cimkey AB
11/18/2008 7:12:58 AM

Thanks for your reply.

I hope that I made it clear that the two tabs in question are addressing different domain names but point at the same directory to access the files.

Surely the cookies would be distinct under these circumstances? 

11/19/2008 10:30:29 AM

Similar Artilces:

User first log and another logs. Stats for users, etc.
Hello!I will write what I have. I have simple membership provider and login/register control. But when the new user come to site, he can sign up. After click "Finish" or "Register" button, his account is saving, but is inactivate. He also gets an email with link to active the account ( link is like: http://mysite.com/activate.aspx?id=XXXXXX, where XXXXXX is simply his GUID number, so activating user is very easy - aproove user where userId = GUID). Ok. But I have problem. How to make simply logger counter for each user ?Simply: "Hello User, this is your 123 log on this portal" My q...

All users are logged off when one user loggs off
I have an application developed with ASP.NET and VB.NET now i am facing a very big problem.That is when in application if anyone user does signout all users who have logged in are also signed out.This means that if 1000 users are logged in and one loggs off then all other 999 users are also logged off. This is a tedious problem and i need it to be solved as soon as possible.Please help me out as soon as possible if you have any kind of solutions.   Hi Could you post more details especially what is the solution in your code and what is your authentication setting in IIS?Best...

Web page not detecting a logged in user/user not logging in
Hey guysAs it stands, I've created two web pages within my app. One is a login page which is simply a blank page with the login control dragged on top. Within this control I redirect to my second page which contains a set of asp:Panels that are supposed to hide/display depending on which user is browsing the page.I've read several tutorials and at the moment, I've installed memberships/roles using the aspnet_regsql application. I've also used the web administration tool to create an 'administrators' role and create a user which is assigned to that role. I've also ...

Users logging in as the same user..
HI there.. I have a problem with ASE12.0 .. I have created 10 users on the database and granted everybody permissions and all.. However, it seems everybody, no matter who logs in, logs in as the same user.. For eg... I have user logins John, Alex, Alan, Steve......etc etc And i created a user group for all of them (eg developers..) However, when they log on to isql, anything that they do will be under John, no matter if it is logins John, Alex, Steve... or etc etc.. If i do a sp_who.. all the connections will be listed as John. If they create tables, all table created will ...

User Log in Log
I need to keep a daily record of network logins Being Auditcon does not work with NW6, is there a way I can enable Logging on a server/tree to capture user login? Install NSURE Audit. Configure it to record logins and out for both the server and eDir. The Nsure Audit starter pack 1.0.3 is downloadable from the website. ~+~^~+~^~+~^~+~^~+~^~+~^~+~^~ Jim Gosney Netware/Groupwise Admin./Eng. Genesco, Inc. Nashville, TN Currently reading: fiction: Lord of the Rings: Return of the King -- J.R.R. Tolkien non-fiction: George Washington -- James Burns and Susan Dunn rel...

User logs in, loads another users profile.
I hope i'm posting in the correct place, I'm not sure if this is an AD issue or a Novell client issue, or ConsoleOne. User A logs into windows XP with the correct user name and password, it logs him in but loads User B's profile. Both users have never logged into the computer so it's not loading a cached profile, it always loads users B's profile, doesn't matter which computer. If user B logs in it is fine. I checked both users profiles in AD and ConsoleOne and all seems to be set correctly. We do not use roaming profiles, nor do we use terminal se...

want to call one c#.net function in one user control from another user control
hi i have two user controls info.ascx and personal.ascx i have a function like in info.ascx i have a function like showdetails() {   } now i want to access this function from personal.ascx can i do this ? thanks in advance. shwetaThanksshwetaIn a day when don't come across any problem -you can be sure that you are traveling in wrong path  you should better create a class where you will define the "functions" that you need in both files. declare "static" the function and call it like nameofclass.nameoffunction In a web project you can...

Log in another website from the website the user logged in already
Hey guys, I hope anyone can help me out. If the user log in the website1, when clicking the link, the user will be redirected to another website2 skipping the authentication process. Otherwise, the user will have to enter userid and password to log in. Any ideas?  I can do it! Pass the context information (maybe encrypted) to the next site to automatically authenticate the user. Kinda MS Passport."look ma' no hands!"kpeguero hi kpeguero,  The question is how can i do the automatic authentication. Can you explain more details? The sample solution or any refer...

Problem when a user logs in as two different users from same computer one after the other
If a user is already logged in as 'sun21170', then if any browser window is opened simultaneoulsly, the same  user 'sun21170' should automatically get logged in. I have seen this happen here on aspnet forums application. Can some one tell me how I could do this? Right now the second window is not automatically loggin in the first window user.sun21170 You need to set the forms authentication persistence cookie; there are two ways to accomplish this.FormsAuthentication.RedirectFromLoginPage( myUserName, true);   // Sets the persistence cookie to true so that// the next ti...

Login Control logs user in, but User is not authenticated, but user really is!
I am using aspnetmembershipprovider.  Everything works fine.  I slap a login control on my login page and am able to login and get to my secure folder etc.  When I try and put some code in the LoggedIn method "User.Identity.IsAuthenticated" = false, yet if I blow through that, I am logged, authenicated etc.  The documentation says that the LoggedIn event is "after the user is authenticated".  Any Ideas what is up?Thanks,TPS------------------------------------------------------Note Collaboration for your next confernce call.http://www.ConferenceCallNotes.com I am...

user log in log file
If I open GroupWise Client, it is logged into the poa log even before I put password information. How can I ensure that the user loged in (or didn't) in that time that log shows? Thankyou in advance. -- Fabio Martins OS/CN Analyst http://fabiomartins.net What exactly do you mean? If you mean "can I know if they actually succeeeded in logging in", no. imagine 3 possbilities user logs in correctly user has bad password user just cancels 1 and 3 look identical. 2 will give an FFFF error. "Fabio Martins" <contato@fabiomartins.net>...

After user logs into the site the default directs the user back to the home page.
After user logs into the site the default directs the user back to the home page. I would like to default to another page on the site after login. Anyone know what/where that setting is? I think its built into the core.  Have a look on snowcovered.com I am sure there are 3rd party modules that do what yo want. Antony ...

User logged in (and logged in on all pages)
Hello, If i get a user to log in, after entering there username and password, when they go to other pages, how do i keep them logged in??? like this asp.net site, it says at the top, logged in as:Breenan, and cant see my username in the url address bar.... Any help???? Thanks again. There are many ways to store state information besides in a querystring (which shows up in the address bar)... One common one is a Session variable which acts like a global variable for the entire application. The name could also be gotten from the database, every time the page loads, or it coul...

Redirecting a user after a user is logged in?
I am using the Login control to login a user. But I have the IsAuthenticated property of Identity object as false even after user has logged in, in Login_LoggedIn event. Also, I cannot get roles for the user in this event using Roles.GetRolesForUser. Can someone tell me how I could redirect a user based on user's role (only one role is there in my app per user) when using Login control?sun21170 Have a look into this link http://quickstart.developerfusion.co.uk/QuickStart/aspnet/doc/ctrlref/login/login.aspx Hope this will help youAshok Rajawww.iGold.inDon't forget to click "Mark...

Web resources about - Logging in a user onto one site logs out a user on another! - asp.net.security

Verizon is giving customers free Star Wars-themed Google Cardboard VR viewers
As 2015 comes to a close, we find ourselves looking ahead to the new year and all the technology it's sure to bring. At the top of many lists ...

Developers get new tools from Google to analyze images
Developers can now easily build powerful applications that understand the content of images thanks to new machine vision tools released by Google. ...

Yahoo's board is still debating the Alibaba spinoff
Yahoo's board of directors finished its first of three days of meetings on Wednesday without reaching a decision on whether to press ahead with ...

Join a Live Google+ Hangout with Mike O'Brien at the Paris Climate Talks This Friday
You. Me. Mike. This Friday. The internet. City of Seattle We're not in Paris for the big international climate change conference, so it seemed ...

Facebook's Zuckerberg takes philanthropy into profit, politics
By Yasmeen Abutaleb SAN FRANCISCO (Reuters) - Mark Zuckerberg, who famously urged his company Facebook Inc to "move fast and break things," is ...

Black Friday Frenzy Scrambles Home-Video Sales Ranking
The annual Black Friday sales frenzy once again turned the national home video sales charts into a free-for-all, with deeply discounted recent ...

Uber's making it easy to request rides from other apps
With the introduction of the Uber API last year, the ridesharing company began opening its platform to third-party services. Today, Uber's expanding ...

Montenegro: From NATO Enemy to Potential Ally
New York Times Montenegro: From NATO Enemy to Potential Ally New York Times Kotor, on Montenegro's Adriatic coast. Montenegro came into being ...

Texas Files Suit to Block Syrian Refugees
Complaint says Feds aren't meeting their legal obligations to consult with Texas

After privacy ruling, Facebook now requires Belgium users to log in to view pages
The change means that if you don’t have a Facebook account, you can’t view Belgian Facebook pages — including public profiles like those of local ...

Resources last updated: 12/3/2015 2:39:32 AM