How to configure the 'Remember Me' feature in Confluence

お困りですか?

アトラシアン コミュニティをご利用ください。

コミュニティに質問

Code Changes Required

This configuration requires changing the Confluence code in your installation. You will need to reapply these changes whenever you upgrade Confluence. Proceed with caution.

目的

The Confluence Administration Console does not provide an option for disabling the 'Remember Me' feature. There is a feature request for this capability  CONFSERVER-66598 - Getting issue details... STATUS .

As a workaround, you can modify the Velocity file login.vm as described below. 

ソリューション

Non clustered (single node)

The steps required are as follows:You should NOT see any cookie with the name: seraph.confluence

  1. Confluence を停止します。
  2. Go to your Confluence installation directory
  3. Locate the <CONFLUENCE-INSTALLATION>/confluence/login.vm file and make a backup copy
  4. Edit the file
  5. Locate the following line of code:

    #bodytag( "Component" "label='remember.accesskey'" "name='os_cookie'" "value='false'" "theme='aui'" 
    "template='onofflist.vm'") #end
    

    Comment out the line so that it looks like this (note the extra '#' character in front):

    ##bodytag( "Component" "label='remember.accesskey'" "name='os_cookie'" "value='false'" "theme='aui'" 
    "template='onofflist.vm'") #end
    
  6. Save the file and restart Confluence
  7. Repeat the above steps each time you install a new version of Confluence.


クラスタ化 

In Confluence Data Center, we enforce the Remember Me setting silently in order to account for inconsistencies in the session affinity between cluster nodes.

To show the 'Remember me' checkbox:

  1. Confluence を停止します。
  2. Set the cluster.login.rememberme.enabled system property to true.   
  3. Confluence を再起動します。

To disable the 'Remember me' feature:

  1. Confluence を停止します。
  2. Go to Confluence installation directory.
  3. Locate the <CONFLUENCE-INSTALLATION>/confluence/login.vm file and make a backup copy.
  4. Edit the file.
  5. Locate the following section of code:

    #if ($action.shouldRememberMeCheckboxBeOmitted())
        <input type="hidden" name="os_cookie" value="true"/>
    #else
        #bodytag( "Component" "label='remember.accesskey'" "name='os_cookie'" "value='false'" "theme='aui'" "template='onofflist.vm'") #end
    #end

    and change the 'Remember me' cookie value to true as follows. 

    <input type="hidden" name="os_cookie" value="false"/>
  6. Save the file and restart Confluence.

  7. Repeat the above steps for each cluster node. 

(warning) You'll need to make these modifications each time you upgrade to a new version of Confluence.

Verify the Fix

In order to verify if your changes were applied, you will need to do the following:

  1. Log out of your current session
  2. After you open Confluence and login, check your browser cookies
  3. If you disabled 'remember me', you should NOT see any cookie with the name: seraph.confluence


参考資料

Confluence のクッキー

HTTP authentication with Seraph

HTTP Cookie - Wikipedia

Confluence のセッション タイムアウトを調整する方法



最終更新日 2021 年 7 月 22 日

この内容はお役に立ちましたか?

はい
いいえ
この記事についてのフィードバックを送信する
Powered by Confluence and Scroll Viewport.