Security

Ask something
Discussion Locked

HTML Forms Authentication

0 helpful
1 reply

by nelyduranj 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Hi, I am having a problem with my users being able to login to their "Blackboard" account on a college site. If one of my users logs in succesfully and another one wants to login at the same time, that second user is automatically logged in as the first user. They both have Active directory user accounts, and their personal password. We have a proxy server, that is ISA and IIS server as well. What could be causing this problem?

1 reply

by suramya

Most probably whats happening is that your "Blackboard" application is using Sessions and is somehow using the same session ID for all users accessing the site.

So when the first user logs in the session is set to logged in and when the second user visits, the system checks the session to see if the user is logged in and since the Session ID is not unique the system thinks that a user is already logged in and lets them access the resources as user1.

To fix this problem you should have the application generate a unique session ID and store it on the local machine as a cookie. If the cookie doesn't exist a new one should be created and stored.

Hope this made sense. If you need more details on this let me know.

- Suramya

PS: Is this application an inhouse creation or something you bought?

This discussion is closed to new replies.