Welcome to ISAserver.org

Prevent caching login page

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Cache Rules >> Prevent caching login page

Page: [1]

Message

<< Older Topic Newer Topic >>

Prevent caching login page - 7.Jul.2006 5:09:19 AM

shanyuen

Posts: 14
Joined: 20.Jun.2006
Status: offline

What is the effective method to prevent caching to login page ?
My users can accessing another user's private page without login

And sometime when i go to webmail, automatically i directed to another user inbox.
Many users in my office complaining about his privacy because of this.
I can prevent to caching some URL, but i think that is not effective method to solve the problem.
I think preventing to caching cookies is the best solution. Any idea ?

Post #: 1

Featured Links*

RE: Prevent caching login page - 7.Jul.2006 10:02:02 AM

Ashokk001

Posts: 232
Joined: 6.Oct.2005
Status: offline

Hi shanyuen,

You can either create a URL set which points to the logon screen's url and then create a rule that does not cache to that url. your specify the URL set you created in the "To" box and place this rule above you other cache rules.

Another way to do it is to untick the box that states:

"Content requiring user authentication for retrival" under the "Store in cache" section on the "Cache Store and Retrieval"

HTH,

Ashok.

(in reply to shanyuen)

Post #: 2

RE: Prevent caching login page - 7.Jul.2006 3:30:23 PM

shanyuen

Posts: 14
Joined: 20.Jun.2006
Status: offline

Like i said before that creating rule by URL set is not efficient, because there is too many websites using login page.
Maybe "Content requiring user authentication for retrival" option is good, i'll try it.

(in reply to Ashokk001)

Post #: 3

RE: Prevent caching login page - 11.Jul.2006 1:50:44 PM

shanyuen

Posts: 14
Joined: 20.Jun.2006
Status: offline

"Content requiring user authentication for retrival" option didn't work.
After a user accessing to his private page, another user can go to his private page without login.

I think, that happen because ISA server caching to the cookies.

(in reply to shanyuen)

Post #: 4

RE: Prevent caching login page - 12.Jul.2006 12:32:58 PM

Ashokk001

Posts: 232
Joined: 6.Oct.2005
Status: offline

Hi there,

The change in setting will only work for any newly cached settings, you need to manually delete the websites that it has cached already. There is a tool that allows you to view the content on the cache and allow deletion of the cache data.

You may also want to uncheck the "dynamic content" box as well becase we had a similar problems to yours.

Ash.

(in reply to shanyuen)

Post #: 5

RE: Prevent caching login page - 12.Jul.2006 1:59:09 PM

shanyuen

Posts: 14
Joined: 20.Jun.2006
Status: offline

Thanks for the reply.
But i still need "dynamic content" option to caching php,asp,etc.
I'll using cachedir to mark as absolete.
Many thanks.

< Message edited by shanyuen -- 12.Jul.2006 2:41:02 PM >

(in reply to Ashokk001)

Post #: 6

RE: Prevent caching login page - 13.Jul.2006 8:43:04 AM

nhhung_80

Posts: 8
Joined: 21.Jun.2006
Status: offline

Hi shanyuen,
When search on internet, i feel happy to pass by this web site and this item because i still have a problem with my ISA server 2004.
YOur way: "I think preventing to caching cookies is the best solution. Any idea ?"
Can you help me to prevent to caching cookies?
Thanks shanyuen,
*** Hung Nguyen ***

(in reply to shanyuen)

Post #: 7

RE: Prevent caching login page - 17.Jul.2006 2:39:01 AM

shanyuen

Posts: 14
Joined: 20.Jun.2006
Status: offline

I had clearing all ISA cache and browser cache, but when someone login to website, another users still can access that website using the previous user id.
Maybe i'll give up with this problem.

Then how to prevent caching by URL set only for page not images, because i still want to caching it's images ?

Thanks.

(in reply to nhhung_80)

Post #: 8

RE: Prevent caching login page - 21.Jul.2006 1:32:27 PM

nhhung_80

Posts: 8
Joined: 21.Jun.2006
Status: offline

We have to use temporary way by preventing caching URL.

Thanks shanyuen,
*** Hung Nguyen ***

(in reply to shanyuen)

Post #: 9

RE: Prevent caching login page - 21.Jul.2006 4:40:54 PM

theboss

Posts: 3
Joined: 12.Jul.2006
Status: offline

u need to uncheck "cache dynamic content" in the cache rule setup.. the "content requiring user authenication" only with the stuff protected with directory security..and a dialoge box pops up in your browser asking for username password and domain..

(in reply to nhhung_80)

Post #: 10