Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-32965

Expose per-user SASL mechanism negotiation via isMaster

    XMLWordPrintableJSON

Details

    • Icon: Improvement Improvement
    • Resolution: Fixed
    • Icon: Major - P3 Major - P3
    • 3.7.2
    • None
    • Security
    • None
    • Fully Compatible
    • Platforms 2018-02-12

    Description

      Allow clients to inform servers during isMaster which user they will eventually authenticate as. This permits the server to express which SASL authentication mechanisms may be used to authenticate as that user. The username send in the command request must be unprocessed and unnormalized.

      Example:

      MongoDB Enterprise > db.runCommand({isMaster: 1, saslSupportedMechs: "sajack.admin"})
      {
              "ismaster" : true,
              "saslSupportedMechs": ["SCRAM-SHA-1", "SCRAM-SHA-256"],
              ...
              "ok" : 1
      }
      
      

      Attachments

        Activity

          People

            spencer.jackson@mongodb.com Spencer Jackson
            spencer.jackson@mongodb.com Spencer Jackson
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: