[X2Go-Commits] [x2gobroker] 01/01: etc/x2gobroker.conf: Switch over to using dynamic auth cookies by default.

[git-admin at x2go.org]

This is an automated email from the git hooks/post-receive script.

x2go pushed a commit to branch master
in repository x2gobroker.

commit b9643e57e6fe1dfbe2c7123d036eecf28c16ceee
Author: Mike Gabriel <mike.gabriel at das-netzwerkteam.de>
Date:   Tue Mar 31 06:10:48 2015 +0200

    etc/x2gobroker.conf: Switch over to using dynamic auth cookies by default.
---
 debian/changelog       |    1 +
 etc/x2gobroker.conf    |    2 +-
 x2gobroker/defaults.py |    2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index df87b67..011d798 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -289,6 +289,7 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low
       options--strongly restricting the key usage--now. Modify x2gobroker-
       pubkeyauthorizer in a way that it replaces non-option keys with the
       newly provided optionized/restricted pubkeys. (Fixes: #685).
+    - etc/x2gobroker.conf: Switch over to using dynamic auth cookies by default.
   * debian/control:
     + Provide separate bin:package for SSH brokerage: x2gobroker-ssh.
     + Replace LDAP support with session brokerage support in LONG_DESCRIPTION.
diff --git a/etc/x2gobroker.conf b/etc/x2gobroker.conf
index 86314f4..97da830 100644
--- a/etc/x2gobroker.conf
+++ b/etc/x2gobroker.conf
@@ -35,7 +35,7 @@
 # X2Go supports two different cookie authentication modes (static and dynamic).
 # Dynamic cookies send new cookie to client on every request.  This could possibly
 # cause issues if a client ever tries multiple requests at the same time.
-#use-static-cookie = true
+#use-static-cookie = false
 
 # Once a client is authenticated their password is not revalidated until this
 # many seconds have elapsed from their initial authentication.
diff --git a/x2gobroker/defaults.py b/x2gobroker/defaults.py
index 382fac5..596d38c 100644
--- a/x2gobroker/defaults.py
+++ b/x2gobroker/defaults.py
@@ -199,7 +199,7 @@ X2GOBROKER_CONFIG_DEFAULTS = {
         # use these two instead of check-credentials...
         u'require-password': True,
         u'require-cookie': False,
-        u'use-static-cookie': True,
+        u'use-static-cookie': False,
         u'auth-timeout': 36000,
         u'cookie-directory': '/var/lib/x2gobroker/cookies',
         u'verify-ip': True,

--
Alioth's /srv/git/code.x2go.org/x2gobroker.git//..//_hooks_/post-receive-email on /srv/git/code.x2go.org/x2gobroker.git