Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-58591

Better instrumentation for TLS authentication problem during concurrent tenant migration

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • 5.0.0
    • 5.1.0-rc0
    • None
    • None
    • Fully Compatible
    • ALL
    • Hide

      Failure from BF-21501

       

      Show
      Failure from BF-21501  
    • Core Eng TPM 2021-07-30

    Description

      There is a race somewhere in TLS authentication during many concurrent tenant migrations. The recipient d20522 does not match the name coming with cert from the donor:

       

      d20522| 2021-06-10T03:12:12.909+00:00 I  ACCESS   5286202 [conn16] "Different user name was supplied to saslSupportedMechs","attr":{"error":{"code":17,"codeName":"ProtocolError","errmsg":"Attempt to switch user during SASL authentication."}}

      Need better logging in the chain, then will wait for it to happen again.

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-69464 "Attempt to switch user during SASL authentication" error when cluster is configured for x509 membership auth

          • Major - P3 - Major loss of function.
          • Closed

          Activity

            People

              andrew.shuvalov@mongodb.com Andrew Shuvalov (Inactive)
              andrew.shuvalov@mongodb.com Andrew Shuvalov (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: