    def self.load_current_node(session, crm_dom=nil)
      node = ClusterEntity::Node.new
      node.corosync = corosync_running?
      node.corosync_enabled = corosync_enabled?
      node.pacemaker = pacemaker_running?
      node.pacemaker_enabled = pacemaker_enabled?
      node.cman = cman_running?
      node.pcsd_enabled = pcsd_enabled?

      node_online = (node.corosync and node.pacemaker)
      node.status =  node_online ? 'online' : 'offline'

      node.uptime = get_node_uptime
      node.id = get_local_node_id

      if node_online and crm_dom
        node_el = crm_dom.elements["//node[@id='#{node.id}']"]
        if node_el and node_el.attributes['standby'] == 'true'
          node.status = 'standby'
        else
          node.status = 'online'
        end
        node.quorum = !!crm_dom.elements['//current_dc[@with_quorum="true"]']
      else
        node.status = 'offline'
      end

      return node
    end
Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions.