Resolve TODO about authSchemaVersion and enableLocalhostAuthBypass config parameters

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Server Security
    • Server Security 2026-04-10, Server Security 2026-04-24, Server Security 2026-05-08, Server Security 2026-05-22, Server Security 2026-06-05, Server Security 2026-06-19
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Resolve TODO in mongod_options.cpp (or remove TODO from the code if nothing to be done):

          // TODO: Integrate these options with their setParameter counterparts
    if (params.count("security.authSchemaVersion")) {
        return Status(ErrorCodes::BadValue,
                      "security.authSchemaVersion is currently not supported in config files");
    }    if (params.count("security.enableLocalhostAuthBypass")) {
        return Status(ErrorCodes::BadValue,
                      "security.enableLocalhostAuthBypass is currently not supported in config "
                      "files");
    }

      These configs also have TODOs in mongod_options_general.idl .

      It looks like security.enableLocalhostAuthBypass has a matching server parameter in enable_localhost_auth_bypass_parameter.idl , but security.enableLocalhostAuthBypass is marked read-only: authorization_manager_global_parameters.idl

            Assignee:
            Karen Zhao
            Reporter:
            Anna Veselova
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: