Description
Currently, the GSSAPI service name for a mongo server is hardcoded to mongodb, and the hostname for authentication purposes is found by calling getHostName(). This requires customers to have a working DNS setup, and to not use CNAMEs to identify mongo nodes to clients.
A solution that allows customers to use CNAMEs is to allow system admins to optionally override at startup the hostname used by the server for purposes of sasl authentication.
Attachments
Issue Links
- is depended on by
-
JAVA-845 Ability to use different SPN on the driver for Kerberos Authentication
-
- Closed
-
-
DRIVERS-1889 Ability to use different Service Name on the driver for Kerberos Authentication
-
- Closed
-
- is duplicated by
-
SERVER-8325 Let administrator override sasl service name and host name used by server for GSSAPI authentication.
-
- Closed
-
- related to
-
SERVER-11770 Sasl Service Name cannot be specified for the shell or tools
-
- Closed
-