>If the user successfuly authenticate, a cookie should be put on his >computer, which expires after 30 minutes.When I check the cookie >expiration date from inside the browser, I find it is the expected time >added to it 51 years!
Sounds like you might be calling the FormsAuthentication.SetAuthCookie() with createPersistentCookie = true or getting the equivalent behavior. Asking for a persistant cookie (or in other words "remember me") will set the expiration of the cookie out that far in the future and the timeout is ignored. Chad =================================== This list is hosted by DevelopMentorŪ http://www.develop.com View archives and manage your subscription(s) at http://discuss.develop.com