Hi, here is a long-winded description of authentication issues I (along with most of my colleagues) am experiencing with Kiln for Your Server, Version 184.108.40.206 (DB 109). I know we're not on the latest version, but I haven't seen anything specific to this issue in the release notes, so I'm not sure if it's been fixed already.
I open IE 9 and go to /fogbugz/kiln, and I get redirected to /fogbugz/kiln/Auth/LogOn?ReturnUrl=%2Ffogbugz%2Fkiln%2F. I log in and choose "Remember me." The push activity displays, and if I click the Review button for one of my changesets, the New Review screen appears. I open /fogbugz/kiln in a new tab, the push activity displays, and again if I click the Review button the New Review screen appears. Then I open a new instance of IE, go to /fogbugz/kiln, and again it appears that I am logged in -- the push activity displays and it shows my name and the Log Off link at top right -- but if I click the Review button I get:
Your session has expired
You are no longer logged in. Please log in and try your request again.
If I click the "log in" link on that message, it opens a new tab at /FogBugz/kiln, and still appears that I am logged in, but it is still in this "partially logged in" state. Meanwhile, in the original instance of IE that I opened, I am still fully logged in, and can open Kiln in new tabs and still create reviews.
I get the exact same behavior with Firefox 5.
Chrome 12.0.742.122 has stranger behavior. I go to /FogBugz/kiln, and it appears that I'm logged in, but I get the session expired message if I click the Review button. If I click the Log Off link at top right, it goes to the LogOn page, but if I go to /FogBugz/kiln again it displays the push activity again -- it's not ever "fully" logging out. If I click Log Off, then I do log in again, then in only that tab that I just logged in will I get correct functionality. In all other tabs I get the "partially loggged in" behavior. (I assume that's because with Chrome each tab is a separate process.)
By the way, I used clicking the Review button in my examples above, but I also get the session expired message if I try to filter the push activity or do other similar things. Also, if I click on a link in an email for a review, I have no problems while navigating the review, clicking files, changesets, etc., but when I click the Approve/Reject tab and click Approved, I get the "Your session has expired..." message again.