Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-53724

Make DBClient able to reauthenticate with x509 automatically when reconnecting for tenant migrations

    XMLWordPrintable

    Details

    • Type: Task
    • Status: Closed
    • Priority: Major - P3
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.9.0
    • Component/s: None
    • Backwards Compatibility:
      Fully Compatible
    • Sprint:
      Sharding 2021-01-25, Sharding 2021-02-08

      Description

      Currently, we pass in the transientSSLParams for x509 when calling connect(). This allows us to connect and authenticate successfully, but at this time we are not able to reauthenticate after automatic DBClient reconnects here. We already have provisions for doing something similar with keyauth here, so hopefully we can leverage some of that functionality.

      Ideally, this should all be handled internally in DBClient itself. We need information from the recipient service to reauthenticate, but perhaps that can be done cleanly via storing a lambda.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              jason.zhang Jason Zhang
              Reporter:
              vesselina.ratcheva Vesselina Ratcheva
              Participants:
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: