-
Type:
Improvement
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Kerberos
-
Labels:None
- Currently the native Kerberos authenticator returns false when various C function calls fail. The proper way of dealing with this is to raise a Ruby extension. Code upstream of the native authenticator is not expecting false returns and ends up sending bogus requests to the server, for example, as a result.
- The exception should be of a class defined by mongo_kerberos library, e.g. Mongo::Gssapi::Error.
- When sasl errors happen, mongo_kerberos should provide the error code and message to assist in troubleshooting.
- sasl initialization should be done globally, and one time per process. If it fails an exception should be raised preventing mongo_kerberos from being loaded, with descriptive details.