Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-7596

Support SCRAM-SHA-1 SASL Mechanism

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major - P3
    • Resolution: Fixed
    • None
    • 2.7.8
    • Security

    Description

      This protocol is a cryptographically more sophisticated variant of Mongo's basic authentication. Mongo still stores a hash of the user's password and it uses a challenge-response protocol. It will have the advantage for some users of being a well-known and studied protocol.

      Attachments

        Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. SERVER-14830 SCRAM-SHA-1 conversations fail to complete

          • Major - P3 - Major loss of function.
          • Closed

          Task - A task that needs to be done. SERVER-15177 Use native SCRAM-SHA-1 in Enterprise version

          • Major - P3 - Major loss of function.
          • Closed
          is depended on by

          New Feature - A new feature of the product, which has yet to be developed. JAVA-828 Support SASL SCRAM-SHA1 authentication

          • Major - P3 - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. JAVA-1461 Support authentication mechanism negotiation

          • Major - P3 - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. CSHARP-990 Implement SCRAM-SHA-1 Authentication Mechanism

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Task - A task that needs to be done. DRIVERS-166 Implement the SCRAM-SHA-1 SASL Mechanism

          • Major - P3 - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. SERVER-7648 Support Use of FIPS 140-2 Compliant Crypto Library

          • Major - P3 - Major loss of function.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-16167 2.8.0-rc0 shell can't auth to a 2.4 server

          • Major - P3 - Major loss of function.
          • Closed
          related to

          Bug - A problem which impairs or prevents the functions of the product. SERVER-15270 Starting mongod with SCRAM-SHA-1 does't actually create SCRAM-SHA-1 credentials

          • Major - P3 - Major loss of function.
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. SERVER-2360 Add a stronger password authentication scheme (replace md5 with sha?)

          • Minor - P4 - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Task - A task that needs to be done. SERVER-15330 Bump maxWireProtocolVersion for 2.8 features

          • Major - P3 - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. DOCS-4056 Updates for SCRAM-SHA-1 support

          • Major - P3 - Major loss of function.
          • Closed
          links to

          Web Link Pull Request #772

          Web Link Pull Request #859

          Web Link Pull Request #863

          Activity

            People

              andreas.nilsson Andreas Nilsson
              schwerin@mongodb.com Andy Schwerin
              Votes:
              0 Vote for this issue
              Watchers:
              9 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: