How to change cluster node authentication in Confluence Data Center
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Purpose
In Confluence 7.18.1 (and selected earlier versions), changes were made to use a shared secret to authenticate nodes as they join the cluster. The shared secret is automatically generated, however, if necessary you can change the shared secret, or disable this authentication altogether.
The following steps are available in these Confluence Data Center versions:
- 7.18.1 and later
- 7.14.3
- 7.16.4
- 7.15.2
- 7.14.3
- 7.13 Long Term Support release from 7.13.7
- 7.4 Long Term Support release from 7.4.17.
Solution
Change the shared secret
You can change the shared secret by updating the confluence.cfg.xml file. This change must be made in both the shared home, and local home for all nodes. You can't make this change while Confluence is running, you'll need to stop the whole cluster.
To change the shared secret:
- Stop Confluence on all nodes.
- Edit
<shared-home>/confluence.cfg.xml
Find the
confluence.cluster.authentication.secret
property and change the value. The secret must be a string of maximum 40 characters.
<property name="confluence.cluster.authentication.secret">abcdefg123456789hijklmnop12345679qrstuvw</property>
- Save the file.
- On the first node, edit
<local-home>/confluence.cfg.xml
- Find the
confluence.cluster.authentication.secret property
and change the value to match the shared home. Shared secrets must match. - Save the file.
- Repeat this process on each remaining node. Remember the secret must be the same in all places.
- Start Confluence, one node at a time. Make sure you wait for the first node to start completely before you start the second node.
Disable node authentication
We don't recommend disabling node authentication. You can't make this change while Confluence is running, you'll need to stop the whole cluster.
To disable node authentication:
- Stop Confluence on all nodes.
- Edit
<shared-home>/confluence.cfg.xml
Find the
confluence.cluster.authentication.enabled
property and set it tofalse
.
<property name="confluence.cluster.authentication.enabled">true</property>
- Save the file.
- On the first node, edit
<local-home>/confluence.cfg.xml
- Find the
confluence.cluster.authentication.enabled
property and set it tofalse
. - Save the file.
- Repeat this process for each node.
- Start Confluence, one node at a time. Make sure you wait for the first node to start completely before you start the second node.