Description

Our instructions within the Configure MongoDB with Kerberos Authentication on Linux we advise to use the following in the /etc/sysconfig/mongod file:

export KRB5_KTNAME="<path to keytab>"

This is incorrect as mongod fails to start with the following error:

[main] Fatal assertion 50743 UnknownError: gssapi could not acquire server credential for mongodb/mongod0.mongodb.local@MONGODB.LOCAL; Major code 851968; Unspecified GSS failure.  Minor code may provide more information; Minor code 2; Key table file '/etc/krb5.keytab' not found;  at src/mongo/db/modules/enterprise/src/sasl/cyrus_sasl_authentication_session.cpp 334

The correct line should resemble:

KRB5_KTNAME="<path to keytab>"

Further to this, there is a spelling error where we state KR5_KTNAME instead of KRB5_KTNAME.

Scope of changes

• Investigate issue and confirm fix
• Update and backport as necessary

Impact to Other Docs

MVP (Work and Date)

Resources (Scope or Design Docs, Invision, etc.)