<commit_before>---
title: InfluxDB Enterprise 1.6 release notes

menu:
  enterprise_influxdb_1_6:
    weight: 10
    parent: About the project
---
## v1.6.4 [2018-10-16]

This release builds off of the InfluxDB OSS 1.6.0 through 1.6.4 releases. For details about changes incorporated from InfluxDB OSS releases, see the [InfluxDB OSS release notes](/influxdb/v1.6/about_the_project/releasenotes-changelog/).

### Breaking changes

#### Require `internal-shared-secret` if meta auth enabled

If `[meta] auth-enabled` is set to `true`, the `[meta] internal-shared-secret` value must be set in the configuration.
If it is not set, an error will be logged and `influxd-meta` will not start.
* Previously, authentication could be enabled without setting an `internal-shared-secret`. The security risk was that an unset (empty) value could be used for the `internal-shared-secret`, seriously weakening the JWT authentication used for intra-node communication.

#### Review production installation configurations

The [Production Installation](/enterprise_influxdb/v1.6/production_installation/)
documentation has been updated to fix errors in configuration settings, including changing `shared-secret` to `internal-shared-secret` and adding missing steps for configuration settings of data nodes and meta nodes. All Enterprise users should review their current configurations to ensure that the configuration settings properly enable JWT authentication for intra-node communication.

The following summarizes the expected settings for proper configuration of JWT authentication for intra-node communication:

##### Data node configuration files (`influxdb.conf`)

**[http] section**

* `auth-enabled = true`
  - Enables authentication. Default value is false.

**[meta] section**

* `meta-auth-enabled = true`
  - Must match for meta nodes' `[meta] auth-enabled` settings.
- `meta-internal-shared-secret = "<long-pass-phrase>"`
  - Must be the same pass phrase on all meta nodes' `[meta] internal-shared-secret` settings.
  - Used by the internal API for JWT authentication. Default value is `""`.
  - A long pass phrase is recommended for stronger security.

##### Meta node configuration files (`meta-influxdb.conf`)

**[meta]** section

* `auth-enabled = true`
  * Enables authentication. Default value is `false` .
* `internal-shared-secret = "<long-pass-phrase>"`
  * Must same pass phrase on all data nodes' `[meta] meta-internal-shared-secret`
  settings.
  * Used by the internal API for JWT authentication. Default value is
`""`.
  * A long pass phrase is recommended for better security.

>**Note:** To provide encrypted intra-node communication, you must enable HTTPS. Although the JWT signature is encrypted, the the payload of a JWT token is encoded, but is not encrypted.

### Bug fixes

* Reject `influxd-ctl add-data` if the host being added is already part of the cluster. 
Also for `influxd-ctl update-data host1 host 2` where host2 != host1 will ALSO be rejected when host2 is already 
part of the cluster.
* Require `internal-shared-secret` if meta auth enabled.


## v1.6.2 [08-27-2018]

This release builds off of the InfluxDB OSS 1.6.0 through 1.6.2 releases. For details about changes incorporated from InfluxDB OSS releases, see the [InfluxDB OSS release notes](/influxdb/v1.6/about_the_project/releasenotes-changelog/).

### Features

* Update Go runtime to `1.10`.
* Provide configurable TLS security options.
* Add LDAP functionality for authorization and authentication.
* Anti-Entropy (AE): add ability to repair shards.
* Anti-Entropy (AE): improve swagger doc for `/status` endpoint.
* Include the query task status in the show queries output.

#### Bug fixes

* TSM files not closed when shard is deleted.
* Ensure shards are not queued to copy if a remote node is unavailable.
* Ensure the hinted handoff (hh) queue makes forward progress when segment errors occur.
* Add hinted handoff (hh) queue back pressure.

## v1.5.4 [2018-06-21]

This release builds off of the InfluxDB OSS 1.5.4 release. Please see the [InfluxDB OSS release notes](/influxdb/v1.5/about_the_project/releasenotes-changelog/) for more information about the InfluxDB OSS release.

## v1.5.3 [2018-05-25]
<commit_msg>Revert "update bug fix for 1.6.4"<commit_after>---
title: InfluxDB Enterprise 1.6 release notes

menu:
  enterprise_influxdb_1_6:
    weight: 10
    parent: About the project
---
## v1.6.4 [2018-10-16]

This release builds off of the InfluxDB OSS 1.6.0 through 1.6.4 releases. For details about changes incorporated from InfluxDB OSS releases, see the [InfluxDB OSS release notes](/influxdb/v1.6/about_the_project/releasenotes-changelog/).

### Breaking changes

#### Require `internal-shared-secret` if meta auth enabled

If `[meta] auth-enabled` is set to `true`, the `[meta] internal-shared-secret` value must be set in the configuration.
If it is not set, an error will be logged and `influxd-meta` will not start.
* Previously, authentication could be enabled without setting an `internal-shared-secret`. The security risk was that an unset (empty) value could be used for the `internal-shared-secret`, seriously weakening the JWT authentication used for intra-node communication.

#### Review production installation configurations

The [Production Installation](/enterprise_influxdb/v1.6/production_installation/)
documentation has been updated to fix errors in configuration settings, including changing `shared-secret` to `internal-shared-secret` and adding missing steps for configuration settings of data nodes and meta nodes. All Enterprise users should review their current configurations to ensure that the configuration settings properly enable JWT authentication for intra-node communication.

The following summarizes the expected settings for proper configuration of JWT authentication for intra-node communication:

##### Data node configuration files (`influxdb.conf`)

**[http] section**

* `auth-enabled = true`
  - Enables authentication. Default value is false.

**[meta] section**

* `meta-auth-enabled = true`
  - Must match for meta nodes' `[meta] auth-enabled` settings.
- `meta-internal-shared-secret = "<long-pass-phrase>"`
  - Must be the same pass phrase on all meta nodes' `[meta] internal-shared-secret` settings.
  - Used by the internal API for JWT authentication. Default value is `""`.
  - A long pass phrase is recommended for stronger security.

##### Meta node configuration files (`meta-influxdb.conf`)

**[meta]** section

* `auth-enabled = true`
  * Enables authentication. Default value is `false` .
* `internal-shared-secret = "<long-pass-phrase>"`
  * Must same pass phrase on all data nodes' `[meta] meta-internal-shared-secret`
  settings.
  * Used by the internal API for JWT authentication. Default value is
`""`.
  * A long pass phrase is recommended for better security.

>**Note:** To provide encrypted intra-node communication, you must enable HTTPS. Although the JWT signature is encrypted, the the payload of a JWT token is encoded, but is not encrypted.

### Bug fixes

* Reject `influxd-ctl update-data` from one existing host to another.
* Require `internal-shared-secret` if meta auth enabled.


## v1.6.2 [08-27-2018]

This release builds off of the InfluxDB OSS 1.6.0 through 1.6.2 releases. For details about changes incorporated from InfluxDB OSS releases, see the [InfluxDB OSS release notes](/influxdb/v1.6/about_the_project/releasenotes-changelog/).

### Features

* Update Go runtime to `1.10`.
* Provide configurable TLS security options.
* Add LDAP functionality for authorization and authentication.
* Anti-Entropy (AE): add ability to repair shards.
* Anti-Entropy (AE): improve swagger doc for `/status` endpoint.
* Include the query task status in the show queries output.

#### Bug fixes

* TSM files not closed when shard is deleted.
* Ensure shards are not queued to copy if a remote node is unavailable.
* Ensure the hinted handoff (hh) queue makes forward progress when segment errors occur.
* Add hinted handoff (hh) queue back pressure.

## v1.5.4 [2018-06-21]

This release builds off of the InfluxDB OSS 1.5.4 release. Please see the [InfluxDB OSS release notes](/influxdb/v1.5/about_the_project/releasenotes-changelog/) for more information about the InfluxDB OSS release.

## v1.5.3 [2018-05-25]

{'fraction_non_alphanumeric': 0.09194986743793686, 'fraction_numerical': 0.01928175463967221, 'mean_word_length': 4.413568166992825, 'pattern_counts': {'":': 0, '<': 7, '<?xml version=': 0, '>': 9, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4629890', 'n_tokens_mistral': 2439, 'n_tokens_neox': 2301, 'n_words': 1008}