Auth cookie shared between web sites

I have two web sites in two different regions running the same app with a DNS Failover that switch to region 2 if region 1 is down. 
Is it possible to keep users logged in when they logged in in region 1 and then are redirected to region 2? 

https://msdn.microsoft.com/en-us/library/eb0zx8fc.aspx
To configure forms authentication across applications, you set attributes of the
forms and
machineKey sections of the Web.config file to the same values for all applications that are participating in shared forms authentication.
The following example shows the
Authentication section of a Web.config file. Unless otherwise noted, the
name, protection, path,
validationKey, validation,
decryptionKey, and decryption attributes must be identical across all applications. Similarly, the encryption and validation key values and the encryption scheme and validation scheme used for authentication tickets
(cookie data) must be the same. If the settings do not match, authentication tickets cannot be shared. For information about how to generate values for the
validationKey and decryptionKey attributes, see
How To: Configure MachineKey in ASP.NET 2.0. (This topic applies to ASP.NET version 2.0 and to later versions.)
Frank

Similar Messages

  • Why I can't get the cookie from this web site when I can get it from google

    public static void main(String[] args) throws Exception {
    // I can get the cookie from "http://www.baidu.com"
    // String domain1 = "http://www.baidu.com/";
    // String domain2 = "www.baidu.com";
    // I can get the cookie from "http://www.google.com"
    // String domain1 = "http://www.google.com/";
    // String domain2 = "www.google.com";
    // I can not get the cookie from "http://www.csdn.net"
    String domain1 = "http://www.csdn.net/";
    String domain2 = "www.csdn.net";
    URL url = new URL(domain1);
    HttpURLConnection httpConn = (HttpURLConnection) url.openConnection();
    httpConn.setRequestProperty("User-Agent", "Internet Explorer");
    httpConn.setRequestProperty("Host", domain2);
    httpConn.connect();
    String cookie = httpConn.getHeaderField("Set-Cookie");
    System.out.println(cookie);
    My question is: How can I get the cookie from the web site:http://www.csdn.net?

    I found it in my computer , the location is: C:\Documents and Settings\zhijun\Cookies\zhijun@csdn[2].txt
    and there are many characters, they are:
    __utma
    17226283.1339458738.1221633513.1223535733.1223539291.58
    csdn.net/
    1600
    786595712
    30107528
    1029600608
    29960677
    __utmz
    17226283.1223539291.58.57.utmccn=(organic)|utmcsr=baidu|utmctr=VB.NET%B2%BB%C4%DC+%B6%CF%B5%E3|utmcmd=organic
    csdn.net/
    1600
    4189609856
    29997389
    1029910608
    29960677
    LastVisitedForum
    b7e466c6-291a-4072-acee-15d2be78c647*b5f1380c-f04c-4682-861a-54357b14186a*0a4a010e-8694-4139-b91f-a4ee1374981b*caa7532e-956b-4661-a53f-d46e3f1a8187*8b327318-2c42-4a49-8aed-ef8c33697e7f
    csdn.net/
    1536
    2105548800
    29964700
    960690608
    29960677
    userid
    2018946
    csdn.net/
    1536
    1900813440
    29963485
    771368976
    29960669
    __utmb
    17226283
    csdn.net/
    1600
    1849111424
    29960681
    1029760608
    29960677
    ABCDEF
    X1rZPCiZupWekhlTu78xWhr2Oj5GmFwk0J%252b8COfIv7IvVh2PgEPu2V7ooeZuUnene2j%252fDKJsNnZWYBSQxVkTfunvGq%252fDYuzFALM0ugLUmppZAHgfUWgQ%252bziPRLLJyFdzUpHwfG%252fReU8SfFy588HH02NPWPsO8RjgtHym%252bcJdUOnIH5J%252bkPEj%252b%252bZwlSPb5u0M0mPQRU1gOScfY4b981MifF4ksep8sZp1Ro2ofGHIg6l%252bgJ0P0XFASz2cJU8Objo%252f
    csdn.net/
    1536
    1900813440
    29963485
    770898976
    29960669
    QWERTOP
    6695
    csdn.net/
    1536
    1900813440
    29963485
    771058976
    29960669
    activeUserName
    boxiuzhen
    csdn.net/
    1536
    1900813440
    29963485
    771058976
    29960669
    UserName
    boxiuzhen
    csdn.net/
    1536
    1900813440
    29963485
    771058976
    29960669
    PName
    542a00960558bf1690fe08696d1245f407130025d59bd14ad6430f
    csdn.net/
    1536
    1900813440
    29963485
    771368976
    29960669
    Is this prove that the csdn web site which I  can not get the cookie is not using url-rewriting?

  • How can I copy cookies about some web site and paste them into a program's header?

    You may know the programme called Teleport Ultra which allows us to download an entire web site and browse offline. There is a forum I want to download but it doesn't allow to see the pages without logging in. So I want to take the cookies after I log in to site, and put them to the programme. How can I do?
    PS: I have to re-create it like "cookie: name1=value1 name2=value2;" in the program

    *Cookie Exporter: https://addons.mozilla.org/firefox/addon/cookie-exporter/

  • Accept cookies from my web sites list only

    Hi,
    yet on Safari 4.0.4 I don't see an option which indeed should be very useful: "Accept coockies from my web sites custom list only". With this option I could quickly compile a list with the web sites I like to leave my info and exclude all the rest. For example, I should put on this list only web sites like facebook.com, discussion.apple.com, twitter.com because they need to store my username and password to automatically log in on the next times. I will exclude all the other web sites, which usually gather informations I don't like to share with.
    It's an option about the privacy. So I presume it should be welcome by the whole Mac community.

    No, Safari does not offer that, but there is an alternative that might also work for you:
    I have Cookie Preferences set to 'Accept cookies only for sites I visit', but I only wish to retain cookies for the sites i regularly visit, like these forums and others.
    To that end I use a small app called SafariCookies:
    http://sweetpproductions.com/safaricookies/
    which only works on Leopard and Snow Leopard. This adds an item in Safari Preferences whereby you can automatically delete all cookies on shutdown, except those particular 'favourite' ones you wish to retain to avoid entering your user name and password each time you visit.

  • How do I enable cookies for certain web sites?

    How do I enable cookies for certain sites?

    Hi mmerritt,
    You should take a look at the Knowledge Base article [[Enabling and disabling cookies]]. It will show you how to set an exception so that you can enable cookies for a particular site.
    Hopefully this helps!

  • Using Windows 7 and Firefox 10.0.2, at random times all home page images "disappear" when switching between web sites. Page layout on some web sites is lost. Requires removing and downloading Firefox to restore. Any ideas?

    I have recently (6 months ago) purchased and use an HP Pavilion desktop with Windows 7. At times, when especially active (several windows open) and switching between windows or using links to connect with another web page, all the images on the home home page "disappear", that is to say there is space, but no image, as if the page did not load correctly. When this happens, pages other than the home page also do not display images.
    Same pages display correctly in Explorer whenever this happens.

    Hi
    Can you please try setting up full persmission in the security properties for everyone on the wsconfig folder C:\ColdFusion10\config\wsconfig  and restart ColdFusion Server.
    Swaraj

  • IE fails to store cookies for some web sites

    Hi,
    I am working on a PHP based website. The problem is IE is not storing the cookies for this site. I have cross checked this that the cookies are being saved in the system for other sites: I was able to login to Yahoo, Gmail and so on..... only my site is
    not working. I tried Mozilla Firefox and Chrome and both are working without any issues.
    Usually cookies will be stored to "C:\Users\user-name\AppData\Roaming\Microsoft\Windows\Cookies" and I can see cookies for other websites in this directory but not mine.
    This is my url: http://md1svcvlnx24/wmsdev/
    Is there anything wrong in domain name? but I think a domain name can contain numbers.
    Thanks,
    Nagaraj

    Hi Kelvin,
    Thanks for the reply. You cannot access http://md1svcvlnx24/wmsdev/ on internet, its a local environment. Our customers
    have just given alias for localhost I think. We can access this instance using our local network and when I try to login to the site, I noticed the cookies not been saving to the system and this happening only for this site, rest OK.
    My doubt is: What is the use of giving domain name when calling setCookie() in PHP?
    Is it necessary to set domain name when calling this function? We are assigning NULL ("") value to this option when calling setCookie() funcxtion
    At present we are calling setCookie() function like below,
    setcookie(name, value, expire, '/', "");  Please note that we are assigning null value to domain name (last option). So do we need to assign domain name here? If so how in this case (http://md1svcvlnx24/wmsdev/)?
    I really appreciate your suggestion.
    Thanks,
    Nagaraj

  • How to disable referrer between web sites but still enable them inside web sites?

    I don't want websites to track where I come from. But I guess nowadays for them to work properly I still need referrer to be enabled inside the same site. Best and easiest way to accomplish all that?

    Try this extension:
    *RefControl: https://addons.mozilla.org/firefox/addon/refcontrol/

  • What's the difference between a web site and a web application?

    I'm stumped trying to come up to a difference between a web site and a web application for myself. As I see it, a web site points to a specific page and a web application is more of some sort of 'portal' to content and information.
    But where I'm stuck is that a web application is still viewed through a browser (is it not?) and a web site can still view content dynamically, making the line between web site and application prety gray.
    For instance, does a web site using ASP.NET or AJAX (I assume ASP.NET is AJAX's proprietary sibling, if not, ignore ASP.NET AND concentrate on the AJAX), becomes a web application because it can retrieve data dynamically and asynchronously or would a website
    using PHP and a CMS be more of a web application because it forms the pages on request, based on the request of the client and its content in its databse?
    Or maybe I'm totally wrong here - what differenciates between a web application and a website?
    http://support.peopleperhour.com/entries/68630566--C-mon-lets-Watch-The-Other-Woman-2014-full-movie-online-free
    https://glossicom.zendesk.com/entries/68643806--%D0%BC-v%C9%AA%C9%9Bc-%C3%A4st-Watch-The-Lucy-2014-full-movie-free
    https://cloudhance.zendesk.com/entries/68115098--%D0%BC-v%C9%AA%C9%9Bc-%C3%A4st-Watch-The-Lucy-2014-full-movie-free
    This is totally personal and subjective, but I'd say that a website is defined by its content, while a webapplication is
    defined by its interaction with the user. That is, a website can plausibly consist of a static content repository that's dealt out to all visitors, while a web application depends on interaction and requires programmatic user input and data processing.
    For example, a news site would be a "website", but a spreadsheet or a collaborative calendar would be web "applications". The news site shows essentially the same information to all visitors, while the calendar processes individual data.
    Practically, most websites with quickly changing content will also rely on a sophisticated programmatic (and/or database) backend, but at least in principle they're only defined by their output. The web application on the other hand is essentially a program that
    runs remotely, and it depends fundamentally on a processing and a data storage backend.
    http://support.peopleperhour.com/entries/68125597--%D0%BC-v%C9%AA%C9%9Bc-%C3%A4st-Watch-The-Lucy-2014-full-movie-free
    https://cloudhance.zendesk.com/entries/67541393--Watch-The-Godzilla-2014-free-Online-Full-Movie-HD-Quality
    http://support.peopleperhour.com/entries/68168787--Watch-The-Godzilla-2014-free-Online-Full-Movie-HD-Quality
    https://glossicom.zendesk.com/entries/68161538--Watch-The-Godzilla-2014-free-Online-Full-Movie-HD-Quality
    There is no real "difference". Web site is a more anachronistic term that exists from the early days of
    the internet where the notion of a dynamic application that can respond to user input was much more limited and much less common. Commercial websites started out largely as interactive brochures (with the notable exception of hotel/airline reservation sites).
    Over time their functionality (and the supporting technologies) became more and more responsive and the line between an application that you install on your computer and one that exists in the cloud became more and more blurred.
    If you're just looking to express yourself clearly when speaking about what you're building, I would continue to describe something that is an interactive brochure or business card as a "web site" and something that actually *does something that feels
    more like an application as a web app.
    The most basic distinction would be if a website has a supporting database that stores user data and modifies what the user sees based on some user specified criteria, then it's probably an app of some sort (although I would be reluctant to describe Amazon.com
    as a web app, even though it has a lot of very user-specific functionality). If, on the other hand, it is mostly static .html files that link to one another, I would call that a web site.
    Most often, these days, a web app will have a large portion of its functionality written in something that runs on the client (doing much of the processing in either javascript or actionscript, depending on how its implemented) and reaches back through some
    http process to the server for supporting data. The user doesn't move from page to page as much and experiences whatever they're going to experience on a single "page" that creates the app experience for them.

    ...can i make as many iweb websites as i want? ...and as many blogs as i want? ...i have never made one before....
    ....although, i do have my own small business and i do have a website that i paid a guy to make and also host....(which is a waste of $$$$ in my opinion as i think i can do a better job making one myself through iweb) ....
    ...anyways, i know it is splitting hairs but what exactly is the diff b/w a blog and a website ....i am under the impression that a blog is just a personal newsletter sort of thing,...?

  • Web Site resource bundles

    Hello,
    I'd like to know your opinions about how many resource bundles should I use on a big web site. Should I use on per page, one per section, or one per site?
    What do you suggest?
    My current approach is one per page, but there are lots of repeated strings, so I think one per site or per section is better.
    What's the performance impact of this decision?
    Do I have to make some kind of cache for the resource bundles?
    Thanks!

    While I haven't done JSP, I have done both Java and web development.
    I'd have to say a bundle per section would probably be best. I've found that in normal Java development, it's pretty much standard to have one per package, as strings tend not to repeat between packages too frequently. I think it'd be safe to say that they won't much between web site sections either.
    Hope that helps!
    Martin Hughes

  • Intention of JSF (web applications or web sites?)

    Hi,
    I want to write a web application that has a similar look and feel to todays desktop applications. Thus I don't need a typical web site look (title on the top, navigation bar etc.) but a more desktop look (a menu bar on the top, a status bar on the bottom etc.)
    Although I like JSF I am not sure, if this framework is the best for this job. Thus I wanted to ask, if you can tell me the intention of JSF:
    Is it to build web sites or is it also to build web applications without the typical web site look and feel? With JSF both is possible of course. And with the adequat JavaScript library on the client side it looks very nice (e.g. ExtJS).
    But was this one of the intentions of JSF? Or was it primarily to build usual web sites with a page flow etc.? And maybe another framework is better for what I am going to do?
    I only don't want to use a JSF for something it has not been made for.
    Greetings
    Mike

    wpafbuser1 wrote:
    I don't see what the point is in making a distinction between web sites and web apps. Are you trying highlight the difference between say Apache vs. JBoss?I'm not sure what you mean by "the difference between say Apache vs. JBoss" but here's what I meant. When I think a web site, I think of a site where the interaction tends to be more reading, clicking from page to the next, etc., like, for example a news site. With a web app, I tend to think of statefulness, business processes, etc, like an online accounting system, content management system, etc. The distinction is probably pretty academic, though...
    Well you need to decide if you're making a simple web site that serves static content or i fyou're making an application with a GUI. There's a big difference.Exactly.
    For a desktop-like application, I say web browsers in general are a bad choice. I'd use Web Start if possible and write a GUI. In any case, Hehe. That's a completely different (though very valid argument(
    AJAX is the last thing I'd use (now you're writing HTML, XML, AJAX, Java, etc..). Echo2 provides 1 single API rather than hacking several. Flex, while I haven't used much, seems to also provide a much cleaner solution. Fair enough, and that's not an uncommon opinion. I'm probably somewhere in the middle, but, for what I've been asked to do since the web 2.0 hype started, Ajax has been sufficient. I'm not Echo2 expert, but isn't that just an HTML/JS interface with a Java backend with Ajaxy operations? For really, really complex and dynamic UIs Flex (or JavaFX :) might be more appropriate.
    Again, I haven't used JSF so I can't say much about it. But I see lots of projects all the time and JSF seems to be slow for adoption so far. Just my personal experience.Hmm. I've used it for about three years now, fwiw, and really, really like it. Which probably isn't worth much. I will admit, though, that JSF isn't always the right tool (thus the discussion here). As far as adoption goes, it seems to be growing much faster than the other frameworks out there, but I may have tinted glasses... ;)

  • Using a cookie from one application web site to another application

    Hi,
    I have a big application written in ASP/CF. In this
    application, I added a link to my small application in CF. Both
    apps are on the same server but separate websites. I liked to use
    the user admin functionality that is available in the big
    application into my small apps. What I need is the cookie userid
    from the big application so that I can use it. How do I go about
    that? Can you please provide a sample code?
    Thanks in advance.

    meeyaw wrote:
    > Hi,
    >
    > I have a big application written in ASP/CF. In this
    application, I added a
    > link to my small application in CF. Both apps are on the
    same server but
    > separate websites. I liked to use the user admin
    functionality that is
    > available in the big application into my small apps.
    What I need is the cookie
    > userid from the big application so that I can use it.
    How do I go about that?
    > Can you please provide a sample code?
    >
    > Thanks in advance.
    >
    Cookies, by definition, are web site specific. You can set
    them to be
    shared across sub-domains, but you can not have one domain
    read another
    domains cookies. To do what you want one of the applications
    will have
    to pass the desired value to the other in some manner of your
    choosing.

  • Shared attribute in *-web-site.xml

    What exactly does setting the shared attribute of a web-application in *-web-site.xml to "true" accomplish as far as sessions are concerned?
    Even if the session object data may not be shared, should I not get the same session id for two web-applications that have shared="true" set for them in the *-web-site.xml file?
    Also, why is the string returned from HttpServletRequest.getRequestedSessionId()
    so much longer than that returned from HttpSession.getId() in iAS 9.0.3? Shouldn't they be the same if the session is active? In 9.0.3 standalone OC4J, the two method calls return the same string when the session is active. Why is there a difference between iAS 9.0.3 and standalone OC4J 9.0.3?

    Sumit -
    The shared attribute is something that was inherited from the Orion codebase when OC4J was originally created.
    There is a description of the shared attribute on the Orion documentation site.
    http://www.orionserver.com/docs/web-site.xml.html
    I don't know how this behavior functions on OC4J today since we have done a lot of work to implement an AJP protocol listener within OC4J to allow it to sit nicely behind Apache, and we've implemented some new security managers to support JAAS.
    -steve-

  • Using Mac OSX 10.7.1: recently replaced our DSL modum & wireless router and suddently I can't get some web sites to load. Many do, but Twitter and others often do not. I've reset the browsing historty, forms, cookies and cache but it continues to happen.

    Using Mac OSX 10.7.1: recently replaced our DSL modum and wireless router, suddenly I can't get some web sites to load. Many do, but Twitter and others often do not. I've reset the browsing history, forms, cookies and cache but it continues to happen.

    Ok, first thing, why are you doing anything with WAMP or XAMPP when you're running a Mac? MAMP should be what you want unless you're not explaining part of what you are trying to do.
    2nd thing, I haven't used MAMP in a while, but there are two possibilities for not seeing what you want to see once you have MAMP turned on. One possibility is that you already have "Web Sharing" turned on in your Sharing Preference Pane. If that is the case, port 80 will already be taken and you'll be seeing the default Apache install (files are stored at /Library/WebServer/Documents/). This would push MAMP to either not turn on it's web serving capabilities, or to push it to another port. The other possibility is that MAMP defaults to another port anyway. So instead of localhost, you might have to type in localhost:8080 or something similar. I believe the control panel that gets installed can take you to the currently MAMP-served page, and it can also help you change which port your serving on.
    80 is the default port for web serving and the ONLY port that will let you get straight to the server without having to type in webaddress.com:port# instead of just webaddress.com.

  • Sharing sessions between web applications (WAR files)

    I am using weblogic 6.1. The opinion I have read indicates that
              sessions cannot be shared between WAR files. That is, I cannot put an
              attribute on the session from a servlet/JSP in one WAR file and read
              it out from the other. The only justification I've seen is "security".
              Now, I find this rather difficult to accept for several reasons:
              1. I cannot fathom what kind of "security" would prevent me from
              sharing the session between two web applications that I wrote myself.
              Let's say I want to write a system that I divide up, for
              modularity/separate deployment purposes, into 5 different WAR files.
              Why should I not be able to just sign on once and pass that logon
              information in the session from one to the other? (I know, I can use
              cookies or URL rewriting - but that doesn't seem to be to be a good
              solution. And if you can share information through cookies, why not
              through sessions?) What about other user information like currently
              selected language?
              2. Several app servers (iPlanet and I have heard two others) allow you
              to share sessions between WARs. Why not weblogic?
              Thanks for any information you can give me. I have not been able to
              find anything in weblogic documentation about this. If I am
              misunderstanding the server capabilities, please enlighten me.
              Thanks,
              <>< gary
              

    http://www.weblogic.com/docs51/classdocs/webappguide.html
              --kumar allamraju
              Grant Lewis wrote:
              > I'm currently evaluating weblogic and I can't find any references in
              > their documentation set stating they support web applications or war
              > files. They explicitly state in their docs the Servlet 2.2 specification
              > has been supported since version 4.5. I'm evaluating version 5.1. Can
              > anybody clear up the confusion for me.
              >
              > Grant
              

Maybe you are looking for

  • DPS Feedback From Client: A Book Publisher's Perspective

    Greetings, I thought it might be helpful to both Adobe and other publishers to post some real-world feedback from one of our clients. But first, some background: We are a book publisher moving into the realm of book apps. Our book apps or not at all

  • Mouse pointer is flickring when i am using FIREFOX 4 why ?????

    me mouse pointer keeps on FLICKRING when i use FIREFOX 4. it doesn't flickr when i use google chrome or IE. why is it so????? its really annoying me plzzz tell what to do.????? i closed firefox many times but still the same problem.

  • HT2905 How do I find and delete Duplicate songs in iTunes v11.0 (163)

    The steps for previous versions seem to no longer apply to the latest iTunes v11.0 (163). Any suggestions on how to find and delete MANY duplicated songs using the recently updated iTunes (Friday Nov 30th 2012) Thank you for your time.

  • Unencrypting a disk after crash

    My main boot drive is encrypted.  I back the drive up nightly to another internal drive.  Yesterday morning, my main drive suffered a corruption to the master boot record and could not be repaired in software.  As a result, I booted from the backup d

  • Why V1 (input tax) apply to PO but not A1

    Hi friends, I am creating PO under a UK company code. to my understanding, I should input A1(output tax code) since this is liability. However, system forced me to input V1(input tax). Why? while I realized A1 has been applied to customer invoice. is