-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
Server Security
-
ALL
-
None
-
3
-
TBD
-
None
-
None
-
None
-
None
-
None
-
None
Steps to Reproduce
How could an engineer replicate the issue you’re reporting? If the issue is related to a specific query, provide a minimal reproduction of the query.
Download the latest mongokerberos 8.0.5 and run it.
{{\mongodb-win32-x86_64-enterprise-windows-8.0.5\bin>mongokerberos --client -u homey Resolving kerberos environment... [OK] Kerberos environment resolved without errors.}}
{{Verifying forward and reverse DNS resolution works with Kerberos service at <HOST>... Performing reverse DNS lookup of the following FQDNs: * <HOST>}}
{{[OK] DNS test successful.}}
Expected Results
What do you expect to happen?
Output line for each verification process, whether it passes, fails, or missing information. Sample mongokerberos output in our documentation shows additional checks, https://www.mongodb.com/docs/manual/reference/program/mongokerberos/#client-mode
“Resolving kerberos environment... [OK] Kerberos environment resolved without errors. Verifying DNS resolution works with Kerberos service at <hostname>... [OK] DNS test successful. Getting MIT Kerberos KRB5 environment variables... * KRB5CCNAME: not set. * KRB5_CLIENT_KTNAME: not set. * KRB5_CONFIG: not set. * KRB5_KTNAME: not set. * KRB5_TRACE: not set. [OK] Verifying existence of KRB5 client keytab [FILE:/path/to/client.keytab...|FILE:/path/to/client.keytab...] [OK] KRB5 client keytab exists and is populated. Checking principal(s) in KRB5 keytab... [OK] KRB5 keytab is valid. Fetching KRB5 Config... KRB5 config profile resolved as: <Your Kerberos profile file will be output here> [OK] KRB5 config profile resolved without errors. Attempting client half of GSSAPI conversation... [OK] Client half of GSSAPI conversation completed successfully.”
Actual Results
What do you observe is happening?
\mongodb-win32-x86_64-enterprise-windows-8.0.5\bin>mongokerberos --client -u homey Resolving kerberos environment... [OK] Kerberos environment resolved without errors. Verifying forward and reverse DNS resolution works with Kerberos service at <HOST>... Performing reverse DNS lookup of the following FQDNs: * <HOST> [OK] DNS test successful.