Solved

Validation of viewstate MAC failed

Posted on 2014-11-05
8
439 Views
Last Modified: 2014-11-12
Validation of viewstate MAC failed. If this application is hosted by a Web Farm or cluster, ensure that <machineKey> configuration specifies the same validationKey and validation algorithm. AutoGenerate cannot be used in a cluster.   at System.Web.UI.ViewStateException.ThrowMacValidationError(Except

hello everyone

i have seen some error in my sql server logs. hear is

####

Validation of viewstate MAC failed. If this application is hosted by a Web Farm or cluster, ensure that <machineKey> configuration specifies the same validationKey and validation algorithm. AutoGenerate cannot be used in a cluster.   at System.Web.UI.ViewStateException.ThrowMacValidationError(Except

####

i have two web servers and one sql server. for load balancing i have used dns round-robin.

in iis server i have manually created machinKey and submit sam in two servers but the log still exist

please suggest what to do.
0
Comment
Question by:ameriaadmin
  • 4
  • 4
8 Comments
 
LVL 26

Expert Comment

by:Dan McFadden
ID: 40425724
I would review this Microsoft support article:

Link:  https://support.microsoft.com/kb/2915218?wa=wsignin1.0

One of the take aways from the article is to use some sort of sticky session, meaning that a user session stays with the first server to respond to the initial http/https request.  DNS Round Robin could be causing your viewstate issues.

Dan
0
 

Author Comment

by:ameriaadmin
ID: 40425840
good url, i have done it , but still have error
0
 
LVL 26

Expert Comment

by:Dan McFadden
ID: 40425875
Have you tried the application without the DNS round robin?  I would remove 1 of the servers from the round robin config and test the application.  Viewstate can not be shared across servers.

Dan
0
 

Author Comment

by:ameriaadmin
ID: 40425898
yes, from one server it works without errors.
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 26

Expert Comment

by:Dan McFadden
ID: 40425916
Then I'll go back to saying that issue probably lies with the load balancing method (DNS Round Robin) you are using.

You cannot share viewstate across servers without building (programming or thirds party software) some sort functionality to do so.  Since a typical HTTP request is stateless, you would need to have some mechanism in place to share session data or to persist data across servers.  You could accomplish this with a third server running a session manager, known as out-of-proc session, but this adds a little to the application's latency.  There is also third party software which you could install on all servers in the web farm, which stores and replicates the session info so you could use a load balancing method like least-response-time or DNS Round Robin.

The other option would be to store this data in a database but you would still need to build functionality to persist that data with the next inbound request.  Essentially you would be building a SQL backed persistent cache.

Again, I recommend using a load balancing method where the initial request and all subsequent requests for a session are sent to the server that responds to the first request.  This is typically referred to as "Sticky Sessions."  DNS Round Robin is not effective in your defined situation.

Dan
0
 
LVL 26

Accepted Solution

by:
Dan McFadden earned 500 total points
ID: 40425925
Here is a decent article that describes the challenges you are having:

http://www.dzone.com/articles/optimize-aspnet-performance
0
 

Author Comment

by:ameriaadmin
ID: 40439303
thank you the article was very helpful.
0
 

Author Closing Comment

by:ameriaadmin
ID: 40439305
we disable View State Caching
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Introduction In my previous article (http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/SSIS/A_9150-Loading-XML-Using-SSIS.html) I showed you how the XML Source component can be used to load XML files into a SQL Server database, us…
Slowly Changing Dimension Transformation component in data task flow is very useful for us to manage and control how data changes in SSIS.
Viewers will learn how to use the INSERT statement to insert data into their tables. It will also introduce the NULL statement, to show them what happens when no value is giving for any given column.
Viewers will learn how to use the SELECT statement in SQL to return specific rows and columns, with various degrees of sorting and limits in place.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now