• Type: Task
    • Resolution: Unresolved
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Server Security
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Investigate which MongoDB projects/services require which LDAP authentication mechanisms and secrets.

      Context: During LDAP service deployment troubleshooting, discovered that:

      • DIGEST-MD5 is not supported in Cyrus SASL 2.1.28+ (Ubuntu 24.04+, RHEL 10+, AL2027+)
      • DIGEST-MD5 is still tested by ldap_authz_bind.js test
      • Need to understand if DIGEST-MD5 is actually required or if we can skip it on newer platforms

      Action items:
      1. Audit which projects use DIGEST-MD5 SASL binding
      2. Audit which projects use GSSAPI/Kerberos binding
      3. Audit which projects use simple bind
      4. Determine if DIGEST-MD5 testing can be skipped on SASL 2.1.28+ systems
      5. Identify minimum SASL version requirements per project

            Assignee:
            Unassigned
            Reporter:
            Vitalii Lirnyk
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: