-
Type:
Task
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
Server Security
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Investigate which MongoDB projects/services require which LDAP authentication mechanisms and secrets.
Context: During LDAP service deployment troubleshooting, discovered that:
- DIGEST-MD5 is not supported in Cyrus SASL 2.1.28+ (Ubuntu 24.04+, RHEL 10+, AL2027+)
- DIGEST-MD5 is still tested by ldap_authz_bind.js test
- Need to understand if DIGEST-MD5 is actually required or if we can skip it on newer platforms
Action items:
1. Audit which projects use DIGEST-MD5 SASL binding
2. Audit which projects use GSSAPI/Kerberos binding
3. Audit which projects use simple bind
4. Determine if DIGEST-MD5 testing can be skipped on SASL 2.1.28+ systems
5. Identify minimum SASL version requirements per project