-
Type: Bug
-
Resolution: Cannot Reproduce
-
Priority: Minor - P4
-
None
-
Affects Version/s: 2.5.3
-
Component/s: Security
-
Fully Compatible
-
Windows
-
Security 2020-04-20
When I start the server normally, then the server uses the "mongodb" service name. It accepts valid credentials where the client uses the "mongodb" service name and rejects valid credentials where the client uses the "mongoother" service name. This is what I would have expected to happen.
However, when I start the server with setParameter=saslServiceName=mongoother, I get different results. It accepts valid credentials where the client uses the "mongodb" service name and also accepts valid credentials where the client uses the "mongoother" service name.
I believe the server should either accept all service names that are registered with the owner's account, or only accept the one that is specified at startup (or the default when none is specified).