Werk #1069

We replaced a insecure mechanism of generating the auth.secret whichis used during construction of the authentication cookies when a userlogs into the Check_MK Web GUI to make the authentication cookie onlyvalid for an individual site or a group of sites connected in adistributed setup.

What you have to know about:

When the first user accesses the Web GUI after the update to this version,all currently valid auth cookies of all users will be invalidated. As aresult all users will need to login again.

In distributed setups you will also need to do a replication from themaster site (which generated a new secret) to all slave sites (whichgenerated another secret themselfs). The replication will synchronizethe new secret of the master to all slaves which should make thetransparent authentication between all sites work again.