We are using ExCM and all of a sudden are seeing an increasing number of Event ID:1315 errors in the server event logs. Details of the error follow:
Source: ASP.NET 2.0.50727.0
category: Web Event
Event ID: 1315
Event code: 4005
Event message: Forms authentication failed for the request.
Reason: The ticket supplied has expired.
Event time: 7/15/2009 2:28:26 PM
Event time (UTC): 7/15/2009 7:28:26 PM
Event ID: aaf8e04dee2e432d8957ba9dc5c9c015 Event sequence: 1479
Event occurrence: 53
Event detail code: 50202
Application domain: /LM/W3SVC/96926341/Root-2-128921227563252563
Trust level: WSS_Minimal
Application Virtual Path: /
Application Path: C:\Inetpub\wwwroot\wss\VirtualDirectories\30399\
Machine name: xxxxxx
Process ID: 4664
Process name: w3wp.exe
Account name: domain\appsmosssearch
Request URL: https://serverext.company.com:443/nsg/nsgprop/ecbc/graph/Forms/AllItems.aspx
Request path: /nsg/nsgprop/ecbc/graph/Forms/AllItems.aspx
User host address: 1xx.1x.xxx.xxx
User: Is authenticated: False
Thread account name: server\IUSR_SERVER
Name to authenticate:
Custom event details:
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Is there a chance that this is related to my ExCM instance? That's the only forms based authentication I have in place on this prticular server. Thanks!