Here are the environments:
OLD SERVER
Server Product: ColdFusion
Version: 8,0,1,195765
Edition: Enterprise
Operating System: Windows Vista*
OS Version: 6.0
Update Level: .... hf801-00007.jar
IIS Version: 7
(*not sure where that "Vista" comes from? The System Information says "Windows Server 2008 Datacenter without Hyper-V")
NEW SERVER
Server Product: ColdFusion
Version: 10,0,11,285437
Tomcat Version: 7.0.23.0
Edition: Enterprise
Operating System: Windows Server 2008 R2
OS Version: 6.1
Update Level: .... chf10000011.jar
Adobe Driver Version: 4.1 (Build 0001)
IIS Version: 7.5
Here is the problem:
Moved all files and database to NEW SERVER, configured datasource, etc. Configured IIS, set up a testing domain for the NEW SERVER. After jumping through the new ColdFusion hoops (wsconfig.exe, etc), got the new version of the site up and running. However, authentication/login is not working.
I have a pretty standard Coldfusion login, using cfloginuser in the Application.cfc file. After I login on the old site, outputting GetAuthUser (<cfoutput>GetAuthUser: #GetAuthUser()#</cfoutput> prints my username to screen, and all my role-based rules work.
On the new server, outputting GetAuthUser prints empty. Exact same code base, exact same database structures, etc.
I know the login process itself is working, because it is correctly setting session variables with user information, and they are available on subsequent requests. But none of the traditional cflogin data is available on subsequent calls.
What has changed in CF10?