Loading...

XML

Word

Printable

JSON

Type: Improvement
Resolution: Won't Fix
Priority: Major - P3
Fix Version/s: None
Affects Version/s: 2.5.4
Component/s: Security
Labels:

Sprint:
Security 2019-07-29
Case:
Confidence Status:
None
Work Order:
3
CAR Domain/s:
None

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name(s):
None
Goal Link:
None

There are currently 19 commands that do not require authentication. Several of these commands has no use case before an successful authentication has been performed.

To reduce the unauthenticated API surface without introducing any complexity into the auth system we should introduce commands that require authentication but not authorization.

The following commands should only be runnable after a successful authentication (with any user, even a user with no roles):
availableQueryOptions, buildinfo, copydbgetnonce, features, forceerror, getoptime, isdbgrid, isMaster*, listCommands, logout, whatsmyuri

*isMaster is used by several drivers before performing any authentication so this change will require driver adoption.

The following commands should be kept as they are:
_isSelf, authenticate, connectionStatus, getLastError, getnonce, getPrevError, ping, resetError

depends on

DRIVERS-90 drivers must authenticate before calling isMaster()

Closed

SERVER-5479 Arbiter in authenticated replica set should allow and require login/auth for admin-only operations

Backlog

SERVER-13698 Add roles and privileges to connectionStatus output

Closed

is depended on by

DRIVERS-568 Make some unauthenticated commands require auth

Closed

is duplicated by

SERVER-13166 Enabled authentication still allows remote login without username

Closed

SERVER-15293 Anonymous connections are allowed even when auth is enabled

Closed

is related to

SERVER-5479 Arbiter in authenticated replica set should allow and require login/auth for admin-only operations

Backlog

SERVER-34653 don't even parse requiresAuth commands unless client is authenticated

Closed

related to

SERVER-15588 An arbiter should return an empty list of supported SASL mechanisms

Backlog

(1 is duplicated by, 2 is related to, 1 related to)

Assignee:: Spencer Jackson
Reporter:: Andreas Nilsson
Participants:: Andreas Nilsson, Andreas Nilsson, Bernie Hackett, David Golden, Paul A. Mosser, Scott Hernandez, Spencer Jackson
Votes:: 5 Vote for this issue
Watchers:: 30 Start watching this issue

Created:: Dec 17 2013 07:11:19 PM UTC
Updated:: Aug 09 2024 09:25:30 PM UTC
Resolved:: Jul 25 2019 10:20:43 PM UTC

Details

Description

Attachments

Issue Links

Forms

Activity

People

Dates