Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-36938

When authorization is enabled, unauthorized and user actions should be logged as well.

    • Type: Icon: Improvement Improvement
    • Resolution: Works as Designed
    • Priority: Icon: Major - P3 Major - P3
    • None
    • Affects Version/s: None
    • Component/s: None
    • Labels:
      None

      Currently when authorization is enabled, only failed logins seems to be logged.
      Logging both unauthorized (using no password or username),  and authorized connections would simplify server monitoring and management.

      $ sudo rpm -qa | grep mongo
      mongodb-org-server-3.4.15-1.el7.x86_64
      mongodb-mms-monitoring-agent-6.6.2.464-1.x86_64
      mongodb-org-tools-3.4.15-1.el7.x86_64
      mongodb-org-mongos-3.4.15-1.el7.x86_64
      mongodb-org-3.4.15-1.el7.x86_64
      mongodb-org-shell-3.4.15-1.el7.x86_64
      python-pymongo-2.5.2-4.el7.x86_64
      
      storage:
         dbPath: /var/lib/mongo/data/placeholder/test3
         engine: wiredTiger
         journal:
            enabled: true
            commitIntervalMs: 10
         wiredTiger:
            engineConfig:
               cacheSizeGB: 75
      systemLog:
         destination: syslog
      processManagement:
         fork: true
         pidFilePath: /var/run/mongodb/placeholder.pid
      net:
         bindIp: 127.0.0.1,10.X.X.X
         port: 27319
         http:
            RESTInterfaceEnabled: false
         wireObjectCheck: true
      replication:
         replSetName: juno
         oplogSizeMB: 8192
      security:
         keyFile: /etc/mongodb/placeholder.key
         clusterAuthMode: keyFile
         authorization: enabled
         transitionToAuth: true
      

            Assignee:
            nick.brewer Nick Brewer
            Reporter:
            konstruktoid Thomas Sjögren
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: