Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-78193

setParameter ldapForceMultiThreadMode is not respected

    • Type: Icon: Bug Bug
    • Resolution: Duplicate
    • Priority: Icon: Major - P3 Major - P3
    • 7.0.6, 6.0.14
    • Affects Version/s: 6.0.6
    • Component/s: None
    • Labels:
      None
    • Server Security
    • ALL
    • v7.0, v6.0
    • Hide

      1) Spawn a mongod on RHEL 8, enabling LDAP using libldap.so, and enabling ldapForceMultiThreadMode and ldapUseConnectionPool.
      2) Authenticate to the mongod using PLAIN
      3) Check that the numbers returned by db.serverStatus().ldapConnPool are greater than zero

      Show
      1) Spawn a mongod on RHEL 8, enabling LDAP using libldap.so, and enabling ldapForceMultiThreadMode and ldapUseConnectionPool. 2) Authenticate to the mongod using PLAIN 3) Check that the numbers returned by db.serverStatus().ldapConnPool are greater than zero

      Prior to SERVER-56617, LDAPConnectionFactory::create would create a pooled connection if isNativeImplThreadSafe is true. This would be true if OpenLDAPConnection::isThreadSafe(). This would be true if ldapForceMultiThreadMode had been enabled.

      Now LDAPConnectionFactory::create creates a pooled connection if isNativeImplPoolingSafe() is true. isNativeImplPoolingSafe() is true if the new library traits system says the underlying LDAP library is poolingSafe. It does not consider if ldapForceMultiThreadMode is enabled.

            Assignee:
            backlog-server-security [DO NOT USE] Backlog - Security Team
            Reporter:
            spencer.jackson@mongodb.com Spencer Jackson
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: