ID: 12833
Title: Fix logout of active user sessions when using multiple sessions
Component: Multisite
Level: 1
Class: Bug fix
Version: 2.1.0i1
Previous Checkmk 2.0 releases could logout an active login sessions of a user
when the same user was used from multiple clients (e.g. different browsers,
GUI, API, or nagstamon). This was caused by an invalid session cleanup
mechanism.
Background: With Checkmk 2.0 a new login sessions tracking was introduced.
This session tracking allows up to 20 active login sessions for a single user.
Once the 21st login session is opened, a cleanup mechanism is triggered which
cleans up a) all sessions except the newest 20 sessions and b) all sessions
which were inactive for 7 days. Instead of keeping the newest sessions, the it
was keeping the oldest sessions which lead to the active sessions being logged
out in the moment the cleanup was triggered.