Hi,
I have an application that is re-written in
ASP.net 2.0, which
contacts a web service to perform specific actions on accounts.
The issue I have, is that when the users are logging in, we are
finding that sessions are randomly expiring at specific intervals.
For example, a user logs in, and as part of that process provides
specific information which is stored in the session. The user gets to
a point where the code makes a request to the web service, providing
the information previously obtained as part of the session. However,
since the user logged on, something (I believe inside IIS) has
recycled the session data, and so provides blank information to the
web service, causing a bit of a mess.
I researched this last week, and it appears that by default we are
using the ``InProc'' session option in IIS, which has similar
problems. I have managed to get rid of a lot of the recycling issue
by setting the recycle time to midnight, and disabling the antivirus
scanner. However, by analysing the requests made to my web service,
some people are logging in just before 00:00, and the session is
getting recycled on them if they are still logged in past that time.