My website relies heavily on scriptservices called from javascript to pull new data from the database and update different parts of the page. It's mostly news headlines and stock price updates, small items that easily fit into a small json object.
When running the site locally, everything is fine, I can log on and be logged on forever, firebug let's me see that now and again, the response headers contain a "Set-cookie" with a new forms auth cookie.
But on our cluster, this is not the case. After the timeout period, the script service starts returning 401. Not authorized. To make things even more complicated, if I run the requests often enough, it seems to work, say every 2 seconds I do a request, all is good. But if I run only every 20 seconds, I never get a new auth cookie, and I'm effectively logged out.
Anyone seen this behavior?
...
Go to the complete details ...