Using Proxy Accounts in a Web Farm

When the user gets bounced to another web server, even though it contains a valid MSCSAuth ticket, the credentials for the user are not in the AuthFilter password cache. Hence the request is redirected to the login page.

Similar to how Windows Authentication mode is performed in a Web farm scenario without proxy accounts, logic must be added here to allow a seamless logon. The difference here is since in the proxy account scenario, a GUID property is set on the ticket to allow the AuthFilter to do its password lookups based on the GUID instead of the userid, when the credentials are passed onto the filter via the query string, this GUID contained in the ticket (do not create a new GUID) must also be passed along in the query string.

For a code sample of Login.asp configured to use proxy accounts, see Code to Implement Proxy Accounts in a Web Farm Scenario.

See Also

Proxy Accounts

AuthFilter and DDoS Attacks

Configuring Login.asp to use a GUID

Copyright © 2005 Microsoft Corporation.
All rights reserved.