Details
-
Improvement
-
Resolution: Fixed
-
Major
-
18.8.0
-
None
-
Unit
-
Unknown
-
N/A
-
N/A
-
Description
When xwiki.authentication.validationKey / encryptionKey are not set in xwiki.cfg, each node generates its own keys in its permanent directory. In a cluster this logs users out at every node switch, with nothing in the logs explaining why.
Proposal: when observation.remote.enabled is true and a key had to be generated, log an ERROR at startup naming the two keys to set.
Attachments
Issue Links
- is related to
-
XWIKI-25243 Make CSRF tokens identical on all nodes of a cluster
-
- Closed
-