Revisiting my migration from IIS 6 to IIS 7

The original thread.

I’ve had a few minutes to look at it again and noticed something. I think the issue is with the cookies. I’m running it on a subdomain such as http://test.example.com does that cause any issues with cookies created for example.com?

The reason I ask is that the page items that are hidden to those that aren’t logged on extensioned pages but disappear on extensionless pages. Going back to the extensioned pages will show that the cookie exists by showing the logged in items.

Could the subdomain be the issue even though I’m setting the cookie and reading the cookie from the same subdomain?

Use “.example.com” to share cookies between subdomains.

Do you mean here:

		<authentication mode="Forms">
			<forms name=".ASPXAUTH" protection="Encryption" timeout="1209600" path="/" requireSSL="false" slidingExpiration="true" domain=".example.com">

Yup, though that won’t work for the authentication cookies as each process will generally have a different key to encrypt the ticket with. If you remove the encryption it should share between apps. But you probably don’t want to do that.

You can set the same encruption key using


	<system.web>
		<machineKey validationKey="..." decryptionKey="..." validation="SHA1"/>
	</system.web>

If you set them in all your applications, then the authentication ticket/cookie can be shared

There’s only one application.

Another clue!

Well, I’ll try it and see how it works but you’re right. I don’t want to do that. :slight_smile:

Edit to add. No dice. :frowning: I’m just going to have to rebuild this one from the ground up to work with IIS 7. Getting the version that works on IIS 6 is just more trouble than it’s worth.

Well, what I’ve learned is that WebForms with Routing and extension less URLs has issues with IIS7 but MVC works on both IIS6 and IIS7 with no issues but IIS6 takes a bit more setup than IIS7.

Sorry to bring this one back up.