Re: Cutom authentication plugin using cookies

On Tue, 10 Jun 2008 11:01:43 -0700, "James" <j DOT w AT zoom DOT co
DOT uk> wrote:

I am using csharp to build a custom authentication plugin for WMS on 2003
Service R2 SP2.

I have a website (a.mydomain.com), that once you login sets a cookie on the
client machine - i set the cookie domain to ".mydomain.com" and set it to
expire in 8 hours. I then open ie and punch in the url to my media server
("b.mydomain.com:8080"). WMP opens and my authentication plugin gets called.

Problem - I am looking in the user context and not seeing my cookie - I have
listed out all the name value pairs in the user (and all other contexts) and
not seeing anything related to cookies at all. I can see the cookie is set
in my cache.

Does anyone have experience with this? Am I missing something, or is there
something I can check?


Is it possible the cookie isn't valid for the b.mydomain.com with the
port number specified ? If you're also (presumably) running a web
server on port 80 on that box, is the cookie valid in that context, at
a host on the default web server port ?

Just a thought.

Firefox has the web developer plugin, which allows you to inspect
cookies set in the browser, which can help a lot - I think there's a
similar plugin / toolbar for IE too, which I forget the name of.

HTH
Cheers - Neil
------------------------------------------------
Digital Media MVP : 2004-2008
http://mvp.support.microsoft.com/mvpfaqs
.

Relevant Pages

  • Re: WBC-by-WBC session manipulation
    ... constituted a 'cookie context': is it possible to alter the cookie ... context of one WBC within an application without altering the cookie ... context of another WBC instance within the same application? ...
    (microsoft.public.inetsdk.programming.webbrowser_ctl)
  • Re: IsInRole not as expected
    ... It looks like the Name and IsAuthenticated are part of the context but roles ... so I need to reread the cookie in order for the roles to be ... > Kim:o) ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: [PATCH 1/6] fastboot: Asynchronous function calls to speed up kernel boot
    ... Subject: [PATCH] fastboot: Asynchronous function calls to speed up kernel boot ... ata port 0 2 ... I'll do some tricks in the libata-core so that port1 can get the cookie of port 0. ...
    (Linux-Kernel)
  • Re: saving session cookies?
    ... Google search, yes I did, I already have that plugin, but was looking for a way to mass save cookie information for later use by another program, without having to copy/paste each cookie. ... vulnerability management needs. ... Download FREE whitepaper on how a managed service can help you: ...
    (Pen-Test)
  • Re: saving session cookies?
    ... Google search, yes I did, I already have that plugin, but was looking for a way to mass save cookie information for later use by another program, without having to copy/paste each cookie. ... vulnerability management needs. ...
    (Pen-Test)