From 1f57617d5edb45a8a696eac7c910e8fc44c934a3 Mon Sep 17 00:00:00 2001 From: Ilya Dryomov Date: Mon, 22 Mar 2021 19:16:32 +0100 Subject: [PATCH] auth/cephx: rotate auth tickets less often If unauthorized global_id (re)use is disallowed, a client that has been disconnected from the network long enough for keys to rotate and its auth ticket to expire (i.e. become invalid/unverifiable) would not be able to reconnect. The default TTL is 12 hours, resulting in a 12-24 hour reconnect window (the previous key is kept around, so the actual window can be up to double the TTL). The setting has stayed the same since 2009, but it also hasn't been enforced. Bump it to get a 72 hour reconnect window to cover for something breaking on Friday and not getting fixed until Monday. Signed-off-by: Ilya Dryomov (cherry picked from commit 522a52e6c258932274f0753feb623ce008519216) --- src/common/options.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/common/options.cc b/src/common/options.cc index 907f5e499e842..3d4a16edede8f 100644 --- a/src/common/options.cc +++ b/src/common/options.cc @@ -2257,7 +2257,7 @@ std::vector