Questions tagged [machinekey]

143 questions
4
votes
1 answer

SSO Forms Authentication issue. Unable to decrypt authentication cookie

I'm trying to develop SSO authentication between 2 web applications, application A and application B. Application A is MVC 4 application and application B is MVC 3 application. What should happen is: When a user tries to access application B, he…
4
votes
3 answers

ASP.NET Server Migration

We have a long-lived ASP.NET 3.5 application we are moving from a physical server running Windows 2005+IIS 6 to a virtual one running Windows 2008+IIS7. The new machine will assume the identify of the old one - IP's, DNS, etc. Our clients keep our…
n8wrl
  • 19,439
  • 4
  • 63
  • 103
4
votes
1 answer

Why am I only *randomly* getting "Validation of viewstate MAC failed" in a single server environment?

Yes, there are a million questions and threads on this particular error, with many well-documented solutions, which I will definitely try. But first I want to understand the problem for my particular situation/environment. In my situation, this…
CptSupermrkt
  • 6,844
  • 12
  • 56
  • 87
3
votes
1 answer

SHA1 or AES - which is better in asp.net?

which is better used in MachineKey for 3.5 framework in asp.net? and what is the reason why?
Juvil
  • 490
  • 12
  • 26
3
votes
1 answer

Setting validationKey at server vs. site vs. app level

Our production environment has three load-balanced servers. On each server, there are nine sites in IIS. In each site, there are between 1 and 15 different apps. To maintain proper encryption/decryption across all three servers, the same…
mattsmith321
  • 6,793
  • 5
  • 28
  • 18
3
votes
0 answers

MVC2 Anti-ForgeryToken help

I have applied an antiforgerytoken to my POST actions within my app. When the session times out I am getting an "A required anti-forgery token was not supplied or was invalid" error. I have added a machineKey to the web.config but this hasn't…
3
votes
0 answers

Changing machine key for exisiting asp.net application

I have a asp.net 4.5 application with hundreds of existing users. We need to change the machine key used in the web config file. We have arrived at the point where two applications are using the same machine key and when a user logs into one…
dstewart101
  • 1,084
  • 1
  • 16
  • 38
3
votes
2 answers

Hashing no longer works in .Net 4.0 despite MSDN workarounds

I have an existing app in production that uses SqlMembershipProvider and has a specified machine key: It runs under .Net 2.0 AppPool…
DarkwingDuck
  • 2,686
  • 24
  • 29
3
votes
1 answer

ASP.NET webforms and MVC authentication sharing via cookie

There seems to be parts of the answers to my problem spread over multiple posts but putting it together hasn't worked so far for me, so I hope when this post is answered it will form more complete guide The problem I have an ASP.NET webforms…
Atters
  • 801
  • 8
  • 19
3
votes
1 answer

About Security of machinekey

We have a scenario using asp.net Forms Authentication in a web farm and need to setup identical sections on each servers .config file. Is it better to store the section in machine.config rather then web.config? what's…
3
votes
2 answers

Migrating MachineKey from iis6 on old server to iis7 on new server

I am migrating our hosting environment to a totally new data center with new boxes and hardware and software... the whole deal. Our website cookies are encrypted using the machineKey, so when I make a request to my domain and point it to the new web…
MaseBase
  • 800
  • 3
  • 8
  • 31
3
votes
1 answer

Changing machinekey prevents login of existing users

I'm using Membership provider configured in Web.config like this to use SQL CE:
ChrisW
  • 54,973
  • 13
  • 116
  • 224
3
votes
3 answers

Viewstate Validation fails in web-farm - Usual suspects eliminated

I think that I've tried all of the standard responses to this problem, and I know that I've read hundreds of questions and posts about this problem, but none of them seem to have resolved it or shed any light on what the cause is in my scenario.…
RobD
  • 1,695
  • 2
  • 24
  • 49
3
votes
0 answers

How to share ASP.NET Authorization cookies between DotNetNuke 7 and non DotNetNuke 7 sites?

We are building a ASP.NET MVC 4 website that will display information specific to the DotNetNuke logged in user. In order to accomplish this we are setting up the machine keys in the web.config to be exactly the same, and we are also setting the…
3
votes
2 answers

How to synchronize machine keys in AWS EC2?

Since Auto-Scaling doesn't allow buffer period and/or is not intelligent enough to NOT allow only "new requests" coming in to the instance which is scheduled to be turned off due to down-autoscaling, I am trying to avoid using sticky-sessions…
dparkar
  • 1,934
  • 2
  • 22
  • 52
1 2
3
9 10