<p dir="auto">Here is the output I get before and after clearing the cache, and the diff. As you can see the difference is huge. If I run the command again, the output comes back to the initial state (the one with the fewer lines) I think it should be the same.</p>
<h1 dir="auto">Before clearing the cache</h1>
<div class="highlight highlight-source-yaml notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="# Default configuration for &quot;SecurityBundle&quot;
security:
    access_denied_url:    null # Example: /foo/error403

    # strategy can be: none, migrate, invalidate
    session_fixation_strategy:  migrate
    hide_user_not_found:  true
    always_authenticate_before_granting:  false
    erase_credentials:    true
    access_decision_manager:
        strategy:             affirmative
        allow_if_all_abstain:  false
        allow_if_equal_granted_denied:  true
    acl:

        # any name configured in doctrine.dbal section
        connection:           null
        cache:
            id:                   ~
            prefix:               sf2_acl_
        provider:             ~
        tables:
            class:                acl_classes
            entry:                acl_entries
            object_identity:      acl_object_identities
            object_identity_ancestors:  acl_object_identity_ancestors
            security_identity:    acl_security_identities
        voter:
            allow_if_object_identity_unavailable:  true
    encoders:

        # Examples:
        Acme\DemoBundle\Entity\User1: sha512
        Acme\DemoBundle\Entity\User2: 
            algorithm:           sha512
            encode_as_base64:    true
            iterations:          5000

        # Prototype
        class:
            algorithm:            ~

            # Name of hashing algorithm for PBKDF2 (i.e. sha256, sha512, etc..) See hash_algos() for a list of supported algorithms.
            hash_algorithm:       sha512
            key_length:           40
            ignore_case:          false
            encode_as_base64:     true
            iterations:           5000
            cost:                 13
            id:                   ~
    providers:            # Required

        # Examples:
        my_memory_provider:  
            memory:              
                users:               
                    foo:                 
                        password:            foo
                        roles:               ROLE_USER
                    bar:                 
                        password:            bar
                        roles:               [ROLE_USER, ROLE_ADMIN]
        my_entity_provider:  
            entity:              
                class:               SecurityBundle:User
                property:            username

        # Prototype
        name:
            id:                   ~
            chain:
                providers:            []
    firewalls:            # Required

        # Prototype
        name:
            pattern:              ~
            host:                 ~
            methods:              []
            security:             true
            request_matcher:      ~
            access_denied_url:    ~
            access_denied_handler:  ~
            entry_point:          ~
            provider:             ~
            stateless:            false
            context:              ~
            logout:
                csrf_parameter:       _csrf_token
                csrf_token_generator:  ~
                csrf_token_id:        logout
                path:                 /logout
                target:               /
                success_handler:      ~
                invalidate_session:   true
                delete_cookies:

                    # Prototype
                    name:
                        path:                 null
                        domain:               null
                handlers:             []
            anonymous:
                key:                  538c9e213ae18
            switch_user:
                provider:             ~
                parameter:            _switch_user
                role:                 ROLE_ALLOWED_TO_SWITCH
    access_control:
        requires_channel:     null

        # use the urldecoded format
        path:                 null # Example: ^/path to resource/
        host:                 null
        ips:                  []
        methods:              []
        allow_if:             null
        roles:                []
    role_hierarchy:

        # Prototype
        id:                   []"><pre class="notranslate"><span class="pl-c"><span class="pl-c">#</span> Default configuration for "SecurityBundle"</span>
<span class="pl-ent">security</span>:
    <span class="pl-ent">access_denied_url</span>:    <span class="pl-s">null </span><span class="pl-c"><span class="pl-c">#</span> Example: /foo/error403</span>

    <span class="pl-c"><span class="pl-c">#</span> strategy can be: none, migrate, invalidate</span>
    <span class="pl-ent">session_fixation_strategy</span>:  <span class="pl-s">migrate</span>
    <span class="pl-ent">hide_user_not_found</span>:  <span class="pl-c1">true</span>
    <span class="pl-ent">always_authenticate_before_granting</span>:  <span class="pl-c1">false</span>
    <span class="pl-ent">erase_credentials</span>:    <span class="pl-c1">true</span>
    <span class="pl-ent">access_decision_manager</span>:
        <span class="pl-ent">strategy</span>:             <span class="pl-s">affirmative</span>
        <span class="pl-ent">allow_if_all_abstain</span>:  <span class="pl-c1">false</span>
        <span class="pl-ent">allow_if_equal_granted_denied</span>:  <span class="pl-c1">true</span>
    <span class="pl-ent">acl</span>:

        <span class="pl-c"><span class="pl-c">#</span> any name configured in doctrine.dbal section</span>
        <span class="pl-ent">connection</span>:           <span class="pl-c1">null</span>
        <span class="pl-ent">cache</span>:
            <span class="pl-ent">id</span>:                   <span class="pl-c1">~</span>
            <span class="pl-ent">prefix</span>:               <span class="pl-s">sf2_acl_</span>
        <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
        <span class="pl-ent">tables</span>:
            <span class="pl-ent">class</span>:                <span class="pl-s">acl_classes</span>
            <span class="pl-ent">entry</span>:                <span class="pl-s">acl_entries</span>
            <span class="pl-ent">object_identity</span>:      <span class="pl-s">acl_object_identities</span>
            <span class="pl-ent">object_identity_ancestors</span>:  <span class="pl-s">acl_object_identity_ancestors</span>
            <span class="pl-ent">security_identity</span>:    <span class="pl-s">acl_security_identities</span>
        <span class="pl-ent">voter</span>:
            <span class="pl-ent">allow_if_object_identity_unavailable</span>:  <span class="pl-c1">true</span>
    <span class="pl-ent">encoders</span>:

        <span class="pl-c"><span class="pl-c">#</span> Examples:</span>
        <span class="pl-ent">Acme\DemoBundle\Entity\User1</span>: <span class="pl-s">sha512</span>
        <span class="pl-ent">Acme\DemoBundle\Entity\User2</span>: 
            <span class="pl-ent">algorithm</span>:           <span class="pl-s">sha512</span>
            <span class="pl-ent">encode_as_base64</span>:    <span class="pl-c1">true</span>
            <span class="pl-ent">iterations</span>:          <span class="pl-c1">5000</span>

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">class</span>:
            <span class="pl-ent">algorithm</span>:            <span class="pl-c1">~</span>

            <span class="pl-c"><span class="pl-c">#</span> Name of hashing algorithm for PBKDF2 (i.e. sha256, sha512, etc..) See hash_algos() for a list of supported algorithms.</span>
            <span class="pl-ent">hash_algorithm</span>:       <span class="pl-s">sha512</span>
            <span class="pl-ent">key_length</span>:           <span class="pl-c1">40</span>
            <span class="pl-ent">ignore_case</span>:          <span class="pl-c1">false</span>
            <span class="pl-ent">encode_as_base64</span>:     <span class="pl-c1">true</span>
            <span class="pl-ent">iterations</span>:           <span class="pl-c1">5000</span>
            <span class="pl-ent">cost</span>:                 <span class="pl-c1">13</span>
            <span class="pl-ent">id</span>:                   <span class="pl-c1">~</span>
    <span class="pl-ent">providers</span>:            <span class="pl-c"><span class="pl-c">#</span> Required</span>

        <span class="pl-c"><span class="pl-c">#</span> Examples:</span>
        <span class="pl-ent">my_memory_provider</span>:  
            <span class="pl-ent">memory</span>:              
                <span class="pl-ent">users</span>:               
                    <span class="pl-ent">foo</span>:                 
                        <span class="pl-ent">password</span>:            <span class="pl-s">foo</span>
                        <span class="pl-ent">roles</span>:               <span class="pl-s">ROLE_USER</span>
                    <span class="pl-ent">bar</span>:                 
                        <span class="pl-ent">password</span>:            <span class="pl-s">bar</span>
                        <span class="pl-ent">roles</span>:               <span class="pl-s">[ROLE_USER, ROLE_ADMIN]</span>
        <span class="pl-ent">my_entity_provider</span>:  
            <span class="pl-ent">entity</span>:              
                <span class="pl-ent">class</span>:               <span class="pl-s">SecurityBundle:User</span>
                <span class="pl-ent">property</span>:            <span class="pl-s">username</span>

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">name</span>:
            <span class="pl-ent">id</span>:                   <span class="pl-c1">~</span>
            <span class="pl-ent">chain</span>:
                <span class="pl-ent">providers</span>:            <span class="pl-s">[]</span>
    <span class="pl-ent">firewalls</span>:            <span class="pl-c"><span class="pl-c">#</span> Required</span>

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">name</span>:
            <span class="pl-ent">pattern</span>:              <span class="pl-c1">~</span>
            <span class="pl-ent">host</span>:                 <span class="pl-c1">~</span>
            <span class="pl-ent">methods</span>:              <span class="pl-s">[]</span>
            <span class="pl-ent">security</span>:             <span class="pl-c1">true</span>
            <span class="pl-ent">request_matcher</span>:      <span class="pl-c1">~</span>
            <span class="pl-ent">access_denied_url</span>:    <span class="pl-c1">~</span>
            <span class="pl-ent">access_denied_handler</span>:  <span class="pl-c1">~</span>
            <span class="pl-ent">entry_point</span>:          <span class="pl-c1">~</span>
            <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
            <span class="pl-ent">stateless</span>:            <span class="pl-c1">false</span>
            <span class="pl-ent">context</span>:              <span class="pl-c1">~</span>
            <span class="pl-ent">logout</span>:
                <span class="pl-ent">csrf_parameter</span>:       <span class="pl-s">_csrf_token</span>
                <span class="pl-ent">csrf_token_generator</span>:  <span class="pl-c1">~</span>
                <span class="pl-ent">csrf_token_id</span>:        <span class="pl-s">logout</span>
                <span class="pl-ent">path</span>:                 <span class="pl-s">/logout</span>
                <span class="pl-ent">target</span>:               <span class="pl-s">/</span>
                <span class="pl-ent">success_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">invalidate_session</span>:   <span class="pl-c1">true</span>
                <span class="pl-ent">delete_cookies</span>:

                    <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
                    <span class="pl-ent">name</span>:
                        <span class="pl-ent">path</span>:                 <span class="pl-c1">null</span>
                        <span class="pl-ent">domain</span>:               <span class="pl-c1">null</span>
                <span class="pl-ent">handlers</span>:             <span class="pl-s">[]</span>
            <span class="pl-ent">anonymous</span>:
                <span class="pl-ent">key</span>:                  <span class="pl-s">538c9e213ae18</span>
            <span class="pl-ent">switch_user</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">parameter</span>:            <span class="pl-s">_switch_user</span>
                <span class="pl-ent">role</span>:                 <span class="pl-s">ROLE_ALLOWED_TO_SWITCH</span>
    <span class="pl-ent">access_control</span>:
        <span class="pl-ent">requires_channel</span>:     <span class="pl-c1">null</span>

        <span class="pl-c"><span class="pl-c">#</span> use the urldecoded format</span>
        <span class="pl-ent">path</span>:                 <span class="pl-s">null </span><span class="pl-c"><span class="pl-c">#</span> Example: ^/path to resource/</span>
        <span class="pl-ent">host</span>:                 <span class="pl-c1">null</span>
        <span class="pl-ent">ips</span>:                  <span class="pl-s">[]</span>
        <span class="pl-ent">methods</span>:              <span class="pl-s">[]</span>
        <span class="pl-ent">allow_if</span>:             <span class="pl-c1">null</span>
        <span class="pl-ent">roles</span>:                <span class="pl-s">[]</span>
    <span class="pl-ent">role_hierarchy</span>:

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">id</span>:                   <span class="pl-s">[]</span></pre></div>
<h1 dir="auto">After clearing the cache</h1>
<div class="highlight highlight-source-yaml notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="# Default configuration for &quot;SecurityBundle&quot;
security:
    access_denied_url:    null # Example: /foo/error403

    # strategy can be: none, migrate, invalidate
    session_fixation_strategy:  migrate
    hide_user_not_found:  true
    always_authenticate_before_granting:  false
    erase_credentials:    true
    access_decision_manager:
        strategy:             affirmative
        allow_if_all_abstain:  false
        allow_if_equal_granted_denied:  true
    acl:

        # any name configured in doctrine.dbal section
        connection:           null
        cache:
            id:                   ~
            prefix:               sf2_acl_
        provider:             ~
        tables:
            class:                acl_classes
            entry:                acl_entries
            object_identity:      acl_object_identities
            object_identity_ancestors:  acl_object_identity_ancestors
            security_identity:    acl_security_identities
        voter:
            allow_if_object_identity_unavailable:  true
    encoders:

        # Examples:
        Acme\DemoBundle\Entity\User1: sha512
        Acme\DemoBundle\Entity\User2: 
            algorithm:           sha512
            encode_as_base64:    true
            iterations:          5000

        # Prototype
        class:
            algorithm:            ~

            # Name of hashing algorithm for PBKDF2 (i.e. sha256, sha512, etc..) See hash_algos() for a list of supported algorithms.
            hash_algorithm:       sha512
            key_length:           40
            ignore_case:          false
            encode_as_base64:     true
            iterations:           5000
            cost:                 13
            id:                   ~
    providers:            # Required

        # Examples:
        my_memory_provider:  
            memory:              
                users:               
                    foo:                 
                        password:            foo
                        roles:               ROLE_USER
                    bar:                 
                        password:            bar
                        roles:               [ROLE_USER, ROLE_ADMIN]
        my_entity_provider:  
            entity:              
                class:               SecurityBundle:User
                property:            username

        # Prototype
        name:
            id:                   ~
            chain:
                providers:            []
            memory:
                users:

                    # Prototype
                    name:
                        password:             538c9e35acffa
                        roles:                []
            entity:
                class:                ~ # Required
                property:             null
                manager_name:         null
    firewalls:            # Required

        # Prototype
        name:
            pattern:              ~
            host:                 ~
            methods:              []
            security:             true
            request_matcher:      ~
            access_denied_url:    ~
            access_denied_handler:  ~
            entry_point:          ~
            provider:             ~
            stateless:            false
            context:              ~
            logout:
                csrf_parameter:       _csrf_token
                csrf_token_generator:  ~
                csrf_token_id:        logout
                path:                 /logout
                target:               /
                success_handler:      ~
                invalidate_session:   true
                delete_cookies:

                    # Prototype
                    name:
                        path:                 null
                        domain:               null
                handlers:             []
            anonymous:
                key:                  538c9e35ad418
            switch_user:
                provider:             ~
                parameter:            _switch_user
                role:                 ROLE_ALLOWED_TO_SWITCH
            x509:
                provider:             ~
                user:                 SSL_CLIENT_S_DN_Email
                credentials:          SSL_CLIENT_S_DN
            simple_preauth:
                provider:             ~
                authenticator:        ~
            fr3d_ldap:            []
            cas:
                provider:             ~
                remember_me:          true
                success_handler:      ~
                failure_handler:      ~
                check_path:           null
                use_forward:          false
                require_previous_session:  true

                # domain name of the cas application
                cas_server:           ~ # Required

                # port to use when connecting to the CAS application. Defaults to 443.
                cas_port:             443

                # path to the certification authority that issued the certificate for your authentication server.
                ca_certificate:       ~ # Required

                # will be used to trigger the redirection to CAS
                login_path:           ~ # Required
                always_use_default_target_path:  false
                default_target_path:  /
                target_path_parameter:  _target_path
                use_referer:          false
                failure_path:         null
                failure_forward:      false
                failure_path_parameter:  _failure_path
            form_login:
                provider:             ~
                remember_me:          true
                success_handler:      ~
                failure_handler:      ~
                check_path:           /login_check
                use_forward:          false
                require_previous_session:  true
                username_parameter:   _username
                password_parameter:   _password
                csrf_parameter:       _csrf_token
                intention:            authenticate
                post_only:            true
                always_use_default_target_path:  false
                default_target_path:  /
                login_path:           /login
                target_path_parameter:  _target_path
                use_referer:          false
                failure_path:         null
                failure_forward:      false
                failure_path_parameter:  _failure_path
                csrf_provider:        ~
            simple_form:
                provider:             ~
                remember_me:          true
                success_handler:      ~
                failure_handler:      ~
                check_path:           /login_check
                use_forward:          false
                require_previous_session:  true
                username_parameter:   _username
                password_parameter:   _password
                csrf_parameter:       _csrf_token
                intention:            authenticate
                post_only:            true
                authenticator:        ~
                always_use_default_target_path:  false
                default_target_path:  /
                login_path:           /login
                target_path_parameter:  _target_path
                use_referer:          false
                failure_path:         null
                failure_forward:      false
                failure_path_parameter:  _failure_path
                csrf_provider:        ~
            http_basic:
                provider:             ~
                realm:                'Secured Area'
            http_digest:
                provider:             ~
                realm:                'Secured Area'
                key:                  ~ # Required
            remember_me:
                key:                  ~ # Required
                token_provider:       ~
                user_providers:       []
                name:                 REMEMBERME
                lifetime:             31536000
                path:                 /
                domain:               null
                secure:               false
                httponly:             true
                always_remember_me:   false
                remember_me_parameter:  _remember_me
    access_control:
        requires_channel:     null

        # use the urldecoded format
        path:                 null # Example: ^/path to resource/
        host:                 null
        ips:                  []
        methods:              []
        allow_if:             null
        roles:                []
    role_hierarchy:

        # Prototype
        id:                   []

"><pre class="notranslate"><span class="pl-c"><span class="pl-c">#</span> Default configuration for "SecurityBundle"</span>
<span class="pl-ent">security</span>:
    <span class="pl-ent">access_denied_url</span>:    <span class="pl-s">null </span><span class="pl-c"><span class="pl-c">#</span> Example: /foo/error403</span>

    <span class="pl-c"><span class="pl-c">#</span> strategy can be: none, migrate, invalidate</span>
    <span class="pl-ent">session_fixation_strategy</span>:  <span class="pl-s">migrate</span>
    <span class="pl-ent">hide_user_not_found</span>:  <span class="pl-c1">true</span>
    <span class="pl-ent">always_authenticate_before_granting</span>:  <span class="pl-c1">false</span>
    <span class="pl-ent">erase_credentials</span>:    <span class="pl-c1">true</span>
    <span class="pl-ent">access_decision_manager</span>:
        <span class="pl-ent">strategy</span>:             <span class="pl-s">affirmative</span>
        <span class="pl-ent">allow_if_all_abstain</span>:  <span class="pl-c1">false</span>
        <span class="pl-ent">allow_if_equal_granted_denied</span>:  <span class="pl-c1">true</span>
    <span class="pl-ent">acl</span>:

        <span class="pl-c"><span class="pl-c">#</span> any name configured in doctrine.dbal section</span>
        <span class="pl-ent">connection</span>:           <span class="pl-c1">null</span>
        <span class="pl-ent">cache</span>:
            <span class="pl-ent">id</span>:                   <span class="pl-c1">~</span>
            <span class="pl-ent">prefix</span>:               <span class="pl-s">sf2_acl_</span>
        <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
        <span class="pl-ent">tables</span>:
            <span class="pl-ent">class</span>:                <span class="pl-s">acl_classes</span>
            <span class="pl-ent">entry</span>:                <span class="pl-s">acl_entries</span>
            <span class="pl-ent">object_identity</span>:      <span class="pl-s">acl_object_identities</span>
            <span class="pl-ent">object_identity_ancestors</span>:  <span class="pl-s">acl_object_identity_ancestors</span>
            <span class="pl-ent">security_identity</span>:    <span class="pl-s">acl_security_identities</span>
        <span class="pl-ent">voter</span>:
            <span class="pl-ent">allow_if_object_identity_unavailable</span>:  <span class="pl-c1">true</span>
    <span class="pl-ent">encoders</span>:

        <span class="pl-c"><span class="pl-c">#</span> Examples:</span>
        <span class="pl-ent">Acme\DemoBundle\Entity\User1</span>: <span class="pl-s">sha512</span>
        <span class="pl-ent">Acme\DemoBundle\Entity\User2</span>: 
            <span class="pl-ent">algorithm</span>:           <span class="pl-s">sha512</span>
            <span class="pl-ent">encode_as_base64</span>:    <span class="pl-c1">true</span>
            <span class="pl-ent">iterations</span>:          <span class="pl-c1">5000</span>

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">class</span>:
            <span class="pl-ent">algorithm</span>:            <span class="pl-c1">~</span>

            <span class="pl-c"><span class="pl-c">#</span> Name of hashing algorithm for PBKDF2 (i.e. sha256, sha512, etc..) See hash_algos() for a list of supported algorithms.</span>
            <span class="pl-ent">hash_algorithm</span>:       <span class="pl-s">sha512</span>
            <span class="pl-ent">key_length</span>:           <span class="pl-c1">40</span>
            <span class="pl-ent">ignore_case</span>:          <span class="pl-c1">false</span>
            <span class="pl-ent">encode_as_base64</span>:     <span class="pl-c1">true</span>
            <span class="pl-ent">iterations</span>:           <span class="pl-c1">5000</span>
            <span class="pl-ent">cost</span>:                 <span class="pl-c1">13</span>
            <span class="pl-ent">id</span>:                   <span class="pl-c1">~</span>
    <span class="pl-ent">providers</span>:            <span class="pl-c"><span class="pl-c">#</span> Required</span>

        <span class="pl-c"><span class="pl-c">#</span> Examples:</span>
        <span class="pl-ent">my_memory_provider</span>:  
            <span class="pl-ent">memory</span>:              
                <span class="pl-ent">users</span>:               
                    <span class="pl-ent">foo</span>:                 
                        <span class="pl-ent">password</span>:            <span class="pl-s">foo</span>
                        <span class="pl-ent">roles</span>:               <span class="pl-s">ROLE_USER</span>
                    <span class="pl-ent">bar</span>:                 
                        <span class="pl-ent">password</span>:            <span class="pl-s">bar</span>
                        <span class="pl-ent">roles</span>:               <span class="pl-s">[ROLE_USER, ROLE_ADMIN]</span>
        <span class="pl-ent">my_entity_provider</span>:  
            <span class="pl-ent">entity</span>:              
                <span class="pl-ent">class</span>:               <span class="pl-s">SecurityBundle:User</span>
                <span class="pl-ent">property</span>:            <span class="pl-s">username</span>

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">name</span>:
            <span class="pl-ent">id</span>:                   <span class="pl-c1">~</span>
            <span class="pl-ent">chain</span>:
                <span class="pl-ent">providers</span>:            <span class="pl-s">[]</span>
            <span class="pl-ent">memory</span>:
                <span class="pl-ent">users</span>:

                    <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
                    <span class="pl-ent">name</span>:
                        <span class="pl-ent">password</span>:             <span class="pl-s">538c9e35acffa</span>
                        <span class="pl-ent">roles</span>:                <span class="pl-s">[]</span>
            <span class="pl-ent">entity</span>:
                <span class="pl-ent">class</span>:                ~ <span class="pl-c"><span class="pl-c">#</span> Required</span>
                <span class="pl-ent">property</span>:             <span class="pl-c1">null</span>
                <span class="pl-ent">manager_name</span>:         <span class="pl-c1">null</span>
    <span class="pl-ent">firewalls</span>:            <span class="pl-c"><span class="pl-c">#</span> Required</span>

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">name</span>:
            <span class="pl-ent">pattern</span>:              <span class="pl-c1">~</span>
            <span class="pl-ent">host</span>:                 <span class="pl-c1">~</span>
            <span class="pl-ent">methods</span>:              <span class="pl-s">[]</span>
            <span class="pl-ent">security</span>:             <span class="pl-c1">true</span>
            <span class="pl-ent">request_matcher</span>:      <span class="pl-c1">~</span>
            <span class="pl-ent">access_denied_url</span>:    <span class="pl-c1">~</span>
            <span class="pl-ent">access_denied_handler</span>:  <span class="pl-c1">~</span>
            <span class="pl-ent">entry_point</span>:          <span class="pl-c1">~</span>
            <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
            <span class="pl-ent">stateless</span>:            <span class="pl-c1">false</span>
            <span class="pl-ent">context</span>:              <span class="pl-c1">~</span>
            <span class="pl-ent">logout</span>:
                <span class="pl-ent">csrf_parameter</span>:       <span class="pl-s">_csrf_token</span>
                <span class="pl-ent">csrf_token_generator</span>:  <span class="pl-c1">~</span>
                <span class="pl-ent">csrf_token_id</span>:        <span class="pl-s">logout</span>
                <span class="pl-ent">path</span>:                 <span class="pl-s">/logout</span>
                <span class="pl-ent">target</span>:               <span class="pl-s">/</span>
                <span class="pl-ent">success_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">invalidate_session</span>:   <span class="pl-c1">true</span>
                <span class="pl-ent">delete_cookies</span>:

                    <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
                    <span class="pl-ent">name</span>:
                        <span class="pl-ent">path</span>:                 <span class="pl-c1">null</span>
                        <span class="pl-ent">domain</span>:               <span class="pl-c1">null</span>
                <span class="pl-ent">handlers</span>:             <span class="pl-s">[]</span>
            <span class="pl-ent">anonymous</span>:
                <span class="pl-ent">key</span>:                  <span class="pl-s">538c9e35ad418</span>
            <span class="pl-ent">switch_user</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">parameter</span>:            <span class="pl-s">_switch_user</span>
                <span class="pl-ent">role</span>:                 <span class="pl-s">ROLE_ALLOWED_TO_SWITCH</span>
            <span class="pl-ent">x509</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">user</span>:                 <span class="pl-s">SSL_CLIENT_S_DN_Email</span>
                <span class="pl-ent">credentials</span>:          <span class="pl-s">SSL_CLIENT_S_DN</span>
            <span class="pl-ent">simple_preauth</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">authenticator</span>:        <span class="pl-c1">~</span>
            <span class="pl-ent">fr3d_ldap</span>:            <span class="pl-s">[]</span>
            <span class="pl-ent">cas</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">remember_me</span>:          <span class="pl-c1">true</span>
                <span class="pl-ent">success_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">failure_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">check_path</span>:           <span class="pl-c1">null</span>
                <span class="pl-ent">use_forward</span>:          <span class="pl-c1">false</span>
                <span class="pl-ent">require_previous_session</span>:  <span class="pl-c1">true</span>

                <span class="pl-c"><span class="pl-c">#</span> domain name of the cas application</span>
                <span class="pl-ent">cas_server</span>:           ~ <span class="pl-c"><span class="pl-c">#</span> Required</span>

                <span class="pl-c"><span class="pl-c">#</span> port to use when connecting to the CAS application. Defaults to 443.</span>
                <span class="pl-ent">cas_port</span>:             <span class="pl-c1">443</span>

                <span class="pl-c"><span class="pl-c">#</span> path to the certification authority that issued the certificate for your authentication server.</span>
                <span class="pl-ent">ca_certificate</span>:       ~ <span class="pl-c"><span class="pl-c">#</span> Required</span>

                <span class="pl-c"><span class="pl-c">#</span> will be used to trigger the redirection to CAS</span>
                <span class="pl-ent">login_path</span>:           ~ <span class="pl-c"><span class="pl-c">#</span> Required</span>
                <span class="pl-ent">always_use_default_target_path</span>:  <span class="pl-c1">false</span>
                <span class="pl-ent">default_target_path</span>:  <span class="pl-s">/</span>
                <span class="pl-ent">target_path_parameter</span>:  <span class="pl-s">_target_path</span>
                <span class="pl-ent">use_referer</span>:          <span class="pl-c1">false</span>
                <span class="pl-ent">failure_path</span>:         <span class="pl-c1">null</span>
                <span class="pl-ent">failure_forward</span>:      <span class="pl-c1">false</span>
                <span class="pl-ent">failure_path_parameter</span>:  <span class="pl-s">_failure_path</span>
            <span class="pl-ent">form_login</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">remember_me</span>:          <span class="pl-c1">true</span>
                <span class="pl-ent">success_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">failure_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">check_path</span>:           <span class="pl-s">/login_check</span>
                <span class="pl-ent">use_forward</span>:          <span class="pl-c1">false</span>
                <span class="pl-ent">require_previous_session</span>:  <span class="pl-c1">true</span>
                <span class="pl-ent">username_parameter</span>:   <span class="pl-s">_username</span>
                <span class="pl-ent">password_parameter</span>:   <span class="pl-s">_password</span>
                <span class="pl-ent">csrf_parameter</span>:       <span class="pl-s">_csrf_token</span>
                <span class="pl-ent">intention</span>:            <span class="pl-s">authenticate</span>
                <span class="pl-ent">post_only</span>:            <span class="pl-c1">true</span>
                <span class="pl-ent">always_use_default_target_path</span>:  <span class="pl-c1">false</span>
                <span class="pl-ent">default_target_path</span>:  <span class="pl-s">/</span>
                <span class="pl-ent">login_path</span>:           <span class="pl-s">/login</span>
                <span class="pl-ent">target_path_parameter</span>:  <span class="pl-s">_target_path</span>
                <span class="pl-ent">use_referer</span>:          <span class="pl-c1">false</span>
                <span class="pl-ent">failure_path</span>:         <span class="pl-c1">null</span>
                <span class="pl-ent">failure_forward</span>:      <span class="pl-c1">false</span>
                <span class="pl-ent">failure_path_parameter</span>:  <span class="pl-s">_failure_path</span>
                <span class="pl-ent">csrf_provider</span>:        <span class="pl-c1">~</span>
            <span class="pl-ent">simple_form</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">remember_me</span>:          <span class="pl-c1">true</span>
                <span class="pl-ent">success_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">failure_handler</span>:      <span class="pl-c1">~</span>
                <span class="pl-ent">check_path</span>:           <span class="pl-s">/login_check</span>
                <span class="pl-ent">use_forward</span>:          <span class="pl-c1">false</span>
                <span class="pl-ent">require_previous_session</span>:  <span class="pl-c1">true</span>
                <span class="pl-ent">username_parameter</span>:   <span class="pl-s">_username</span>
                <span class="pl-ent">password_parameter</span>:   <span class="pl-s">_password</span>
                <span class="pl-ent">csrf_parameter</span>:       <span class="pl-s">_csrf_token</span>
                <span class="pl-ent">intention</span>:            <span class="pl-s">authenticate</span>
                <span class="pl-ent">post_only</span>:            <span class="pl-c1">true</span>
                <span class="pl-ent">authenticator</span>:        <span class="pl-c1">~</span>
                <span class="pl-ent">always_use_default_target_path</span>:  <span class="pl-c1">false</span>
                <span class="pl-ent">default_target_path</span>:  <span class="pl-s">/</span>
                <span class="pl-ent">login_path</span>:           <span class="pl-s">/login</span>
                <span class="pl-ent">target_path_parameter</span>:  <span class="pl-s">_target_path</span>
                <span class="pl-ent">use_referer</span>:          <span class="pl-c1">false</span>
                <span class="pl-ent">failure_path</span>:         <span class="pl-c1">null</span>
                <span class="pl-ent">failure_forward</span>:      <span class="pl-c1">false</span>
                <span class="pl-ent">failure_path_parameter</span>:  <span class="pl-s">_failure_path</span>
                <span class="pl-ent">csrf_provider</span>:        <span class="pl-c1">~</span>
            <span class="pl-ent">http_basic</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">realm</span>:                <span class="pl-s"><span class="pl-pds">'</span>Secured Area<span class="pl-pds">'</span></span>
            <span class="pl-ent">http_digest</span>:
                <span class="pl-ent">provider</span>:             <span class="pl-c1">~</span>
                <span class="pl-ent">realm</span>:                <span class="pl-s"><span class="pl-pds">'</span>Secured Area<span class="pl-pds">'</span></span>
                <span class="pl-ent">key</span>:                  ~ <span class="pl-c"><span class="pl-c">#</span> Required</span>
            <span class="pl-ent">remember_me</span>:
                <span class="pl-ent">key</span>:                  ~ <span class="pl-c"><span class="pl-c">#</span> Required</span>
                <span class="pl-ent">token_provider</span>:       <span class="pl-c1">~</span>
                <span class="pl-ent">user_providers</span>:       <span class="pl-s">[]</span>
                <span class="pl-ent">name</span>:                 <span class="pl-s">REMEMBERME</span>
                <span class="pl-ent">lifetime</span>:             <span class="pl-c1">31536000</span>
                <span class="pl-ent">path</span>:                 <span class="pl-s">/</span>
                <span class="pl-ent">domain</span>:               <span class="pl-c1">null</span>
                <span class="pl-ent">secure</span>:               <span class="pl-c1">false</span>
                <span class="pl-ent">httponly</span>:             <span class="pl-c1">true</span>
                <span class="pl-ent">always_remember_me</span>:   <span class="pl-c1">false</span>
                <span class="pl-ent">remember_me_parameter</span>:  <span class="pl-s">_remember_me</span>
    <span class="pl-ent">access_control</span>:
        <span class="pl-ent">requires_channel</span>:     <span class="pl-c1">null</span>

        <span class="pl-c"><span class="pl-c">#</span> use the urldecoded format</span>
        <span class="pl-ent">path</span>:                 <span class="pl-s">null </span><span class="pl-c"><span class="pl-c">#</span> Example: ^/path to resource/</span>
        <span class="pl-ent">host</span>:                 <span class="pl-c1">null</span>
        <span class="pl-ent">ips</span>:                  <span class="pl-s">[]</span>
        <span class="pl-ent">methods</span>:              <span class="pl-s">[]</span>
        <span class="pl-ent">allow_if</span>:             <span class="pl-c1">null</span>
        <span class="pl-ent">roles</span>:                <span class="pl-s">[]</span>
    <span class="pl-ent">role_hierarchy</span>:

        <span class="pl-c"><span class="pl-c">#</span> Prototype</span>
        <span class="pl-ent">id</span>:                   <span class="pl-s">[]</span>

</pre></div>
<h1 dir="auto">Diff</h1>
<div class="highlight highlight-source-diff notranslate position-relative overflow-auto" dir="auto" data-snippet-clipboard-copy-content="72a73,83
&gt;             memory:
&gt;                 users:
&gt; 
&gt;                     # Prototype
&gt;                     name:
&gt;                         password:             538c9e35acffa
&gt;                         roles:                []
&gt;             entity:
&gt;                 class:                ~ # Required
&gt;                 property:             null
&gt;                 manager_name:         null
104c115
&lt;                 key:                  538c9e213ae18

---
&gt;                 key:                  538c9e35ad418
108a120,218
&gt;             x509:
&gt;                 provider:             ~
&gt;                 user:                 SSL_CLIENT_S_DN_Email
&gt;                 credentials:          SSL_CLIENT_S_DN
&gt;             simple_preauth:
&gt;                 provider:             ~
&gt;                 authenticator:        ~
&gt;             fr3d_ldap:            []
&gt;             cas:
&gt;                 provider:             ~
&gt;                 remember_me:          true
&gt;                 success_handler:      ~
&gt;                 failure_handler:      ~
&gt;                 check_path:           null
&gt;                 use_forward:          false
&gt;                 require_previous_session:  true
&gt; 
&gt;                 # domain name of the cas application
&gt;                 cas_server:           ~ # Required
&gt; 
&gt;                 # port to use when connecting to the CAS application. Defaults to 443.
&gt;                 cas_port:             443
&gt; 
&gt;                 # path to the certification authority that issued the certificate for your authentication server.
&gt;                 ca_certificate:       ~ # Required
&gt; 
&gt;                 # will be used to trigger the redirection to CAS
&gt;                 login_path:           ~ # Required
&gt;                 always_use_default_target_path:  false
&gt;                 default_target_path:  /
&gt;                 target_path_parameter:  _target_path
&gt;                 use_referer:          false
&gt;                 failure_path:         null
&gt;                 failure_forward:      false
&gt;                 failure_path_parameter:  _failure_path
&gt;             form_login:
&gt;                 provider:             ~
&gt;                 remember_me:          true
&gt;                 success_handler:      ~
&gt;                 failure_handler:      ~
&gt;                 check_path:           /login_check
&gt;                 use_forward:          false
&gt;                 require_previous_session:  true
&gt;                 username_parameter:   _username
&gt;                 password_parameter:   _password
&gt;                 csrf_parameter:       _csrf_token
&gt;                 intention:            authenticate
&gt;                 post_only:            true
&gt;                 always_use_default_target_path:  false
&gt;                 default_target_path:  /
&gt;                 login_path:           /login
&gt;                 target_path_parameter:  _target_path
&gt;                 use_referer:          false
&gt;                 failure_path:         null
&gt;                 failure_forward:      false
&gt;                 failure_path_parameter:  _failure_path
&gt;                 csrf_provider:        ~
&gt;             simple_form:
&gt;                 provider:             ~
&gt;                 remember_me:          true
&gt;                 success_handler:      ~
&gt;                 failure_handler:      ~
&gt;                 check_path:           /login_check
&gt;                 use_forward:          false
&gt;                 require_previous_session:  true
&gt;                 username_parameter:   _username
&gt;                 password_parameter:   _password
&gt;                 csrf_parameter:       _csrf_token
&gt;                 intention:            authenticate
&gt;                 post_only:            true
&gt;                 authenticator:        ~
&gt;                 always_use_default_target_path:  false
&gt;                 default_target_path:  /
&gt;                 login_path:           /login
&gt;                 target_path_parameter:  _target_path
&gt;                 use_referer:          false
&gt;                 failure_path:         null
&gt;                 failure_forward:      false
&gt;                 failure_path_parameter:  _failure_path
&gt;                 csrf_provider:        ~
&gt;             http_basic:
&gt;                 provider:             ~
&gt;                 realm:                'Secured Area'
&gt;             http_digest:
&gt;                 provider:             ~
&gt;                 realm:                'Secured Area'
&gt;                 key:                  ~ # Required
&gt;             remember_me:
&gt;                 key:                  ~ # Required
&gt;                 token_provider:       ~
&gt;                 user_providers:       []
&gt;                 name:                 REMEMBERME
&gt;                 lifetime:             31536000
&gt;                 path:                 /
&gt;                 domain:               null
&gt;                 secure:               false
&gt;                 httponly:             true
&gt;                 always_remember_me:   false
&gt;                 remember_me_parameter:  _remember_me

"><pre class="notranslate"><span class="pl-mdr">72a73,83</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             memory:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 users:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span> </span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                     # Prototype</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                     name:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                         password:             538c9e35acffa</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                         roles:                []</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             entity:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 class:                ~ # Required</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 property:             null</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 manager_name:         null</span>
<span class="pl-mdr">104c115</span>
<span class="pl-md"><span class="pl-md">&lt;</span>                 key:                  538c9e213ae18</span>

<span class="pl-ms">---</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 key:                  538c9e35ad418</span>
<span class="pl-mdr">108a120,218</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             x509:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 provider:             ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 user:                 SSL_CLIENT_S_DN_Email</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 credentials:          SSL_CLIENT_S_DN</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             simple_preauth:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 provider:             ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 authenticator:        ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             fr3d_ldap:            []</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             cas:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 provider:             ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 remember_me:          true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 success_handler:      ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_handler:      ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 check_path:           null</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 use_forward:          false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 require_previous_session:  true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span> </span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 # domain name of the cas application</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 cas_server:           ~ # Required</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span> </span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 # port to use when connecting to the CAS application. Defaults to 443.</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 cas_port:             443</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span> </span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 # path to the certification authority that issued the certificate for your authentication server.</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 ca_certificate:       ~ # Required</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span> </span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 # will be used to trigger the redirection to CAS</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 login_path:           ~ # Required</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 always_use_default_target_path:  false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 default_target_path:  /</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 target_path_parameter:  _target_path</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 use_referer:          false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_path:         null</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_forward:      false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_path_parameter:  _failure_path</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             form_login:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 provider:             ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 remember_me:          true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 success_handler:      ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_handler:      ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 check_path:           /login_check</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 use_forward:          false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 require_previous_session:  true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 username_parameter:   _username</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 password_parameter:   _password</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 csrf_parameter:       _csrf_token</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 intention:            authenticate</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 post_only:            true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 always_use_default_target_path:  false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 default_target_path:  /</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 login_path:           /login</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 target_path_parameter:  _target_path</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 use_referer:          false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_path:         null</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_forward:      false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_path_parameter:  _failure_path</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 csrf_provider:        ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             simple_form:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 provider:             ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 remember_me:          true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 success_handler:      ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_handler:      ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 check_path:           /login_check</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 use_forward:          false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 require_previous_session:  true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 username_parameter:   _username</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 password_parameter:   _password</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 csrf_parameter:       _csrf_token</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 intention:            authenticate</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 post_only:            true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 authenticator:        ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 always_use_default_target_path:  false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 default_target_path:  /</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 login_path:           /login</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 target_path_parameter:  _target_path</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 use_referer:          false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_path:         null</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_forward:      false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 failure_path_parameter:  _failure_path</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 csrf_provider:        ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             http_basic:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 provider:             ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 realm:                'Secured Area'</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             http_digest:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 provider:             ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 realm:                'Secured Area'</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 key:                  ~ # Required</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>             remember_me:</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 key:                  ~ # Required</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 token_provider:       ~</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 user_providers:       []</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 name:                 REMEMBERME</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 lifetime:             31536000</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 path:                 /</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 domain:               null</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 secure:               false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 httponly:             true</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 always_remember_me:   false</span>
<span class="pl-mi1"><span class="pl-mi1">&gt;</span>                 remember_me_parameter:  _remember_me</span>

</pre></div>
<p dir="auto">I found something that I don't think is a bug by itself, but doesn't really strike me as completely correct behaviour neither.</p>
<p dir="auto">When I dump the security configuration on the console, I will not see any authentication mechanism configurations, like form_login, x509, http_basic etc, but after I clear the cache without warming up, these configuration settings are correctly dumped.</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="$ php app/console config:dump-reference security
   firewalls:            # Required

        # Prototype
        name:
            pattern:              ~
            host:                 ~
            .......
            anonymous:
                key:                  54a5a642d6404
            switch_user:
                provider:             ~
                parameter:            _switch_user
                role:                 ROLE_ALLOWED_TO_SWITCH
    access_control:
        requires_channel:     null

        # use the urldecoded format
        path:                 null # Example: ^/path to resource/
        host:                 null

$"><pre class="notranslate"><code class="notranslate">$ php app/console config:dump-reference security
   firewalls:            # Required

        # Prototype
        name:
            pattern:              ~
            host:                 ~
            .......
            anonymous:
                key:                  54a5a642d6404
            switch_user:
                provider:             ~
                parameter:            _switch_user
                role:                 ROLE_ALLOWED_TO_SWITCH
    access_control:
        requires_channel:     null

        # use the urldecoded format
        path:                 null # Example: ^/path to resource/
        host:                 null

$
</code></pre></div>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="$ php app/console clear:cache --no-warmup
$ php app/console config:dump-reference security
   firewalls:            # Required

        # Prototype
        name:
            pattern:              ~
            host:                 ~
            .......
            anonymous:
                key:                  54a5a642d6404
            switch_user:
                provider:             ~
                parameter:            _switch_user
                role:                 ROLE_ALLOWED_TO_SWITCH
            x509:
                provider:             ~
                user:                 SSL_CLIENT_S_DN_Email
                credentials:          SSL_CLIENT_S_DN
            simple_preauth:
                provider:             ~
                authenticator:        ~
            form_login:
                provider:             ~
                remember_me:          true
                success_handler:      ~
                .......
    access_control:
        requires_channel:     null

        # use the urldecoded format
        path:                 null # Example: ^/path to resource/
        host:                 null

$"><pre class="notranslate"><code class="notranslate">$ php app/console clear:cache --no-warmup
$ php app/console config:dump-reference security
   firewalls:            # Required

        # Prototype
        name:
            pattern:              ~
            host:                 ~
            .......
            anonymous:
                key:                  54a5a642d6404
            switch_user:
                provider:             ~
                parameter:            _switch_user
                role:                 ROLE_ALLOWED_TO_SWITCH
            x509:
                provider:             ~
                user:                 SSL_CLIENT_S_DN_Email
                credentials:          SSL_CLIENT_S_DN
            simple_preauth:
                provider:             ~
                authenticator:        ~
            form_login:
                provider:             ~
                remember_me:          true
                success_handler:      ~
                .......
    access_control:
        requires_channel:     null

        # use the urldecoded format
        path:                 null # Example: ^/path to resource/
        host:                 null

$
</code></pre></div>
<p dir="auto">The reason for this is that the authentication security listeners are added through the addSecurityListenerFactory() in the <a href="https://github.com/symfony/symfony/blob/2.7/src/Symfony/Bundle/SecurityBundle/SecurityBundle.php#L39">securityBundle::build()</a> method, which only gets called when creating a new cache.</p>
<p dir="auto">Once the cache has been build, the security listener factories aren't added so the <a href="https://github.com/symfony/symfony/blob/2.7/src/Symfony/Bundle/SecurityBundle/DependencyInjection/MainConfiguration.php#L295">MainConfiguration</a> cannot find their configuration.</p>
<p dir="auto">I think the configuration dump should be consistent regardless if it was cached or not. Maybe there could be a way to add the securityListenerFactories at some other place so the configurations will always show up?</p>