Right now new user names are checked against the current server SN, but it isn't as useful as checking that the new user is not going to be recognized as the system user: https://github.com/mongodb/mongo/blob/r2.6.4/src/mongo/db/commands/authentication_commands.cpp#L343
- causes
-
SERVER-45938 Allow matching O/OU/DC in client x509 cert if clusterMode:keyFile
- Closed