When we check the "Remember Me" checkbox on the login screen, it seems, this has an effect only within 24 hours, and we need to login again and again every new day. Is it a bug, or is there a setting we can change that period to a very big time period or something as "never expires"?

When we check the "Remember Me" checkbox on the login screen, it seems, this has an effect only within 24 hours, and we need to login again and again every new day. Is it a bug, or is there a setting we can change that period to a very big time period or something as "never expires"?

This has to do with your application pool resetting and your server issuing new encryption keys for authentication. When this happens, the keys that encrypted your cookies and login data changed and are rejected by the server, so you are not 'remembered' and have to login again. The only way to fix this is to create a set of keys for the application. These keys must then be kept in your web.config forever (being copied from web.configs over to the new web.configs during upgrades).

---

The only way to fix this is to create a set of keys for the application. These keys must then be kept in your web.config forever

I'm new to this. Can you give me some hints how to do that?

The only way to fix this is to create a set of keys for the application. These keys must then be kept in your web.config forever

I'm new to this. Can you give me some hints how to do that?

First some questions: is YAF.NET running as a sole application in it's app pool or do you have it mixed with other ASP.NET applications?

---

It's running as a separate IIS app.