Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-12235

Don't require a database read on every new localhost connection when auth is on

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Closed
    • Major - P3
    • Resolution: Done
    • 2.4.8, 2.5.4
    • 3.0.3, 3.1.0
    • Security
    • None
    • Fully Compatible

    Description

      Currently, anytime an access-control enabled mongod or mongos receive a new connection from localhost, it must issue a query against admin.system.user to determine if there are any users defined in the system, and thus whether or not to grant the connection full access according to the localhost auth bypass.

      If we determine that there is in fact a user defined, and thus the localhost exception should not be in effect, we cache that information on the connection so that that connection does not have to query admin.system.users for this purpose again.

      We should instead cache the existence of an admin user process-wide so it only needs to be checked once, not once on every new connection.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. SERVER-17845 Running the dropDatabase command can cause an election to occur

          • Major - P3 - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-12236 Don't query admin.system.users on new localhost connections if the localhost auth bypass has been explicitly disabled

          • Major - P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. SERVER-17034 Deadlock between poorly-formed copydb and reading admin.system.users for localhost exception check

          • Major - P3 - Major loss of function.
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. SERVER-18415 Dropping admin user doesn't reenable localhost exception

          • Major - P3 - Major loss of function.
          • Closed

          Activity

            People

              matt.dannenberg Matt Dannenberg
              spencer@mongodb.com Spencer Brody (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: