21 May
2021
21 May
'21
9:22 a.m.
Branch: refs/heads/2.0.0
Home: https://github.com/tribe29/checkmk
Commit: fbaf45411052e69f58daf85557013a586697cecb
https://github.com/tribe29/checkmk/commit/fbaf45411052e69f58daf85557013a586…
Author: Lars Michelsen <lm(a)tribe29.com>
Date: 2021-05-21 (Fri, 21 May 2021)
Changed paths:
A .werks/12833
M cmk/gui/userdb.py
M tests/unit/cmk/gui/test_userdb.py
Log Message:
-----------
12833 FIX Fix logout of active user sessions when using multiple sessions
Previous Checkmk 2.0 releases could logout an active login sessions of a user
when the same user was used from multiple clients (e.g. different browsers,
GUI, API, or nagstamon). This was caused by an invalid session cleanup
mechanism.
Background: With Checkmk 2.0 a new login sessions tracking was introduced.
This session tracking allows up to 20 active login sessions for a single user.
Once the 21st login session is opened, a cleanup mechanism is triggered which
cleans up a) all sessions except the newest 20 sessions and b) all sessions
which were inactive for 7 days. Instead of keeping the newest sessions, the it
was keeping the oldest sessions which lead to the active sessions being logged
out in the moment the cleanup was triggered.
Change-Id: I610e1046702a5d638ff1288fe0a0faf752269d5e