Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-44396

Run the client half of the GSSAPI conversation in mongokerberos

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.3.3
    • Component/s: Security
    • Labels:
      None
    • Backwards Compatibility:
      Fully Compatible
    • Sprint:
      Security 2019-11-18, Security 2019-12-02, Security 2019-12-16, Security 2019-12-30, Security 2019-01-13, Security 2019-01-27

      Description

      Acquiring a client principal, and acquiring a service ticket for the target service can be performed by the client, without sending messages across the non-existent wire. Performing these checks in mongokerberos will let us ensure that the client's keys can be used to obtain service tickets.

      Relevant RFCs:

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              adam.cooper Adam Cooper (Inactive)
              Reporter:
              spencer.jackson Spencer Jackson
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: