Remember Me not working.

[leedavi]

Has anyone else noticed that the "Remember Me" option on login isn’t working correctly? It seems to only last about 60 minutes, even when a longer duration is configured in the web.config.

This issue is occurring on version 10.1.1. It’s a tricky one to spot since there can be legitimate reasons for a user to be logged out, but in my testing so far, the feature doesn’t appear to behave as expected.

Has anyone else experienced this?

[leedavi]

I have upgraded to v10.1.2 and the problem is still there. This worked on v10.1.0. Can anyone confirm this is a problem for them?

[bdukes]

I was not able to replicate an issue on DNN 10.1.1. I set PersistentCookieTimeout to 5 and authentication/forms/@timeout to 1, and using the Remember Me checkbox, I was able to stay logged in longer than one minute (but not without the checkbox). I can try a more realistic scenario, but it will, of course, take significantly longer to test.

[mitchelsellers]

I have this working as well on a number of sites in production with longer values

[leedavi]

OK, Thank you guys. I'll upgrade my v10.1.0 dev site that works to v10.1.2 and see if the problem happens on that. I'll get back to you on the results.

[jeremy-farrance]

@leedavi, the out of the box defaults in DNN leave that feature a bit confusingly "not doing anything." Here is a fair amount of detail on setting up everything in web.config so you are actually making it work and can make useful choices about how long the user stays logged in with and without the Remember Me checked.

DNN Details 001: Remember Login Checkbox and Staying Logged in Longer
https://dnncommunity.org/blogs/Post/1533/DNN-Details-001-Remember-Login-Checkbox-and-Staying-Logged-in-Longer

[valadas]

@jeremy-farrance I knew it had to do with some settings but I could not remember (pun intended) the details. Nice post!

[leedavi]

@jeremy-farrance , great blog post, thank you. I'm at the point that I decided to eat humble pie and read the entire thing. :-) Unfortunately, I have done everything on the blog post. I've been using this feature for years and never had a problem.

At the moment I only have 1 live website on DNN10.1.2 that uses this feature. I've done a new DNN install to test this over different time periods. In en-Us, a clean install seems to work OK. I suspect it's a problem with DNN languages (the website is in fr-FR). It could be a third party module, but it worked on DNN9 with the same modules.

Thank you for everyone's comments, I'll report back when I have done some more tests to try and pinpoint the issue.

[jeremy-farrance]

Okay, this just got interesting. If you find more clues, I'll be interested! We have a multi-language site about to go from 9.13.9 to 10.latest, so thank you for letting me know to test for this. Cheers!

[valadas]

I think the feature is tied into the cookie which is tied into the domain. In you multilanguage site, do both languages use the same domain?

[leedavi]

OK, after more testing, I do not think this is a DNN issue. On a local clean install it works, I've noticed someone has installed some extra modules when it got upgraded and there is a security tampering program that is running on the server. I think one of these is to blame.

Thank you for your time and feedback, and sorry for wasting time.