I’m working on a .Net application which uses “Windows” (ntlm) authentication. I need to debug an issue during the authentication, but after entering my windows credentials the first time, I can’t get the challenge process to fire again.
Apparently NTLM doesn’t really support logging out? I’ve seen answers about writing your own code to delete the cookie, but with no references or code examples.
Does anyone know:
-
is it possible to force a log out of NTLM so that I can get the challenge again?
-
If it’s not possible, does anyone know where the specs are that define how long my cookie is active? I would assume that just because I’m authenticated once, doesn’t mean I am logged in for eternity. What is the cookie session TTL, will a reboot force a re-challenge? Where can I find anything on the actual NTLM protocol details?