<authentication mode="Forms" > 
     <forms name="myapp" path="/" loginUrl="login.aspx" protection="All" timeout="30">
     </forms>
    </authentication>
还有其他步骤嘛?

解决方案 »

  1.   

    要使用那个验证票查看一下FormsAuthenticationTicket类FormsAuthenticationTicket ticket = new FormsAuthenticationTicket(
    1,                              // version
    card_id, // user name
    DateTime.Now,                   // issue time
    DateTime.Now.AddHours(24),       // expires every hour
    false,                          // don't persist cookie
    cPasswd.ToString()                   // roles
    );
    // Encrypt the ticket
    String cookieStr = FormsAuthentication.Encrypt(ticket);
    HttpCookie cookie=Response.Cookies["Auth"];

    cookie.Value=cookieStr;
      

  2.   

    你的<authorization>
       <deny users="?">
    ......
    好像没写啊!
    必须拒绝所有的匿名用户才能看出效果来啊!