Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-39864

Move principal name extraction to error handler in SASL Start

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: 4.0.6, 4.1.8
    • Fix Version/s: 4.0.10, 4.1.11
    • Component/s: Security
    • Labels:
      None
    • Backwards Compatibility:
      Fully Compatible
    • Operating System:
      ALL
    • Backport Requested:
      v4.0
    • Sprint:
      Security 2019-04-22
    • Case:

      Description

      Not all mechanisms allow the server to know an authenticating principal's name after the first client-to-server message. Some of these mechanism may emit log warnings when attempting to access the name. We should only attempt to extract the principal name if we believe we need it for an error message, to keep the logging to a minimum.

        Attachments

          Activity

            People

            • Votes:
              1 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: