When SafeMode is on the C# driver sends the getLastError command to the admin database. Starting with server version 2.1.0 this fails when using authentication because the connection isn't authenticated to use the admin database (the server didn't used to require authentication for the getLastError command). So the getLastError command must be sent to the same database as the operation it is checking to avoid authentication errors.