Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-102881

Authorize FTDC to collect buildInfo

    • Type: Icon: Bug Bug
    • Resolution: Fixed
    • Priority: Icon: Major - P3 Major - P3
    • 8.2.0-rc0
    • Affects Version/s: 8.1.0-rc0
    • Component/s: None
    • None
    • Server Security
    • Fully Compatible
    • ALL
    • v8.1
    • Server Security 2025-04-14, Server Security 2025-04-28, Server Security 2025-05-09
    • None
    • 3
    • None
    • None
    • None
    • None
    • None
    • None

      SERVER-90284 added authorization requirements to buildInfo. It looks like made buildInfo unable to be collected by FTDC : we should ensure FTDC can collect buildInfo.

       

      There are 3 scenarios for returning buildInfo cmd:

      1. BuildInfoAuthModeEnum::kVersionOnlyIfPreAuth:
      • Only the version will be returned before auth.
      • Full buildInfo returned if authenticated.
      1. BuildInfoAuthModeEnum::kAllowedPreAuth:
      • Full buildInfo returned before and after auth.
      1. BuildInfoAuthModeEnum::kRequiresAuth:
      • No version or buildInfo returned before auth.
      • Full buildInfo returned after auth.

      jstests/auth/buildinfo_auth_cmd.js already covers this test cases.

      This change extends BuildInfoAuthModeEnum::kRequiresAuth to allow returning buildInfo when the cmd is called directly by ::typedRun() (which is the default for all commands). This allows FTDC to call it without being authenticated.

            Assignee:
            adrian.gonzalez@mongodb.com Adrian Gonzalez Montemayor
            Reporter:
            didier.nadeau@mongodb.com Didier Nadeau
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: