-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Major - P3
-
Affects Version/s: 8.1.0-rc0
-
Component/s: None
-
None
-
Server Security
-
Fully Compatible
-
ALL
-
v8.1
-
Server Security 2025-04-14, Server Security 2025-04-28, Server Security 2025-05-09
-
None
-
3
-
None
-
None
-
None
-
None
-
None
-
None
SERVER-90284 added authorization requirements to buildInfo. It looks like made buildInfo unable to be collected by FTDC : we should ensure FTDC can collect buildInfo.
There are 3 scenarios for returning buildInfo cmd:
- BuildInfoAuthModeEnum::kVersionOnlyIfPreAuth:
- Only the version will be returned before auth.
- Full buildInfo returned if authenticated.
- BuildInfoAuthModeEnum::kAllowedPreAuth:
- Full buildInfo returned before and after auth.
- BuildInfoAuthModeEnum::kRequiresAuth:
- No version or buildInfo returned before auth.
- Full buildInfo returned after auth.
jstests/auth/buildinfo_auth_cmd.js already covers this test cases.
This change extends BuildInfoAuthModeEnum::kRequiresAuth to allow returning buildInfo when the cmd is called directly by ::typedRun() (which is the default for all commands). This allows FTDC to call it without being authenticated.
- related to
-
SERVER-90245 FTDC logs warnings about deprecated server parameters at startup
-
- Open
-
-
SERVER-90284 Make buildInfo command require authn
-
- Closed
-