-
Type: Bug
-
Resolution: Done
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: Internal Code, Security, Usability
-
Server Security
-
ALL
-
Security 0 03/13/15], Security 1 04/03/15
Usually if you run "copydb" but do not include a "fromhost" field, we assume you are copying from yourself and use a DBDirectClient instead of a real connection to the source server. If you specify a username/password, however, the driver will likely run copydbgetnonce/copydbsaslstart, which will create an actual connection back to ourself on localhost. Easiest fix is probably to make copydbsaslstart and copydbgetnonce fail if "fromhost" is emtpy, as if you're copying from yourself you shouldn't provide credentials anyway, you should just authenticate your connection to an appropriate user before running copydb.
- is depended on by
-
PYTHON-832 Re-enable copy_database tests in auth.py for MongoDB 3.0+
- Closed
- is related to
-
SERVER-17034 Deadlock between poorly-formed copydb and reading admin.system.users for localhost exception check
- Closed