We have this strange but serious problem.
Most of the time our website works fine, we have about 1400 active users a day. But once every few weeks, everyone that comes to our site, gets automatically logged in under the user account of some else. They don't get prompted to log in, but rather are directly redirected and authenticated. I can't reproduce this problem, and solving it has become a challenge. Recycling the application pool solves this.
We use forms authentication.
Anyone that has any thoughts on this?
Regards,
Leo
...
Go to the complete details ...