-
Bug
-
Resolution: Not a bug
-
Low
-
None
-
7.13.7, 7.18.1
-
None
-
6
-
Severity 3 - Minor
-
10
-
Issue Summary
According to Recognized System Properties, confluence.cluster.authentication.secret and confluence.cluster.authentication.enabled can be configured via system property. The confluence.cfg.xml value will always overwrite the secret configured via system property.
Steps to Reproduce
- Stop all nodes
- Remove confluence.cluster.authentication.enabled and confluence.cluster.authentication.secret entries in all node confluence.cfg.xmls and the shared home
- Configure the properties via Configuring System Properties
Tested using a Linux box and setenv.sh entries
- Start up one of the nodes
Expected Results
- The secret used by the application becomes the value set as a system property
Actual Results
- The system properties are read in as noted in
> General Configuration > System Information
- A new secret different from the system property entry is generated in confluence.cfg.xml
Workaround
Configure the secret via confluence.cluster.authentication.secret in confluence.cfg.xml
- relates to
-
CONFSERVER-78179 Confluence Data Center - Java Deserialization Vulnerability In Hazelcast - CVE-2016-10750
-
- Closed
-
Hi All,
I'm going to close this issue as Not a Bug and explain why.
The intent of this functionality is for it to be configured through the confluence.cfg.xml file. In some cases we also provide a route to configure such options as a system property. In this case we did not implement the system property, but mentioned it in the documentation provided to our technical writers. As a result it was erroneously added to the Recognized System Properties page.
We've removed the references to this system property, and are in the process of creating documentation for how to change the properties and set configuration in the confluence.cfg.xml file.
As this was never intended to be a system property, it not working is not a bug and I've closed it out.
Our apologies for the confusion.
Thanks,
James Ponting
Engineering Manager - Confluence Data Center