Werk #16222: Automationuser login must not open full session

Component Setup
Title Automationuser login must not open full session
Date Nov 19, 2023
Level Trivial Change
Class Bug Fix
Compatibility Incompatible - Manual interaction might be required
Checkmk versions & editions
2.3.0b1
Not yet released
Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0b1 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.2.0p16 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

Checkmk offers a method to authenticate single web requests with URL parameters (_username and _secret).

Due to some refactoring of the session handling with Checkmk 2.2 such automation requests initiated a full session.

The login for automation users was still blocked in the login screen but an authenticated request initiated a full session that could than be used to browse the Checkmk GUI like a regular user.

With this Werk that is no longer the case.

If you use this authentication method you should check if you rely on sessions for your automation users.

To the list of all Werks