-
Type: Improvement
-
Resolution: Duplicate
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Security 2018-10-08
Every connection from mongos to mongod is authenticated using the internal __system user. This means that the mongods have no idea what user was authenticated to the connection to the mongos that actually initiated the request they are performing work to respond to. Perhaps a field in the wire protocol could be used for each request to tell the shard what user initiated this request? This would allow shard mongods to use that information in things like logging, profiling, auditing, etc.
- duplicates
-
SERVER-5261 Include authentication information in currentOp results
- Closed
- is depended on by
-
SERVER-7538 When using profiling on a sharded system, user field is always "__system@local"
- Backlog
- is related to
-
SERVER-8876 DDL and Authentication Audit Logs
- Closed
-
SERVER-7942 Mongo servers should fail at startup if --auth and --setParameter=authenticationMechanisms=""
- Closed
- related to
-
SERVER-5261 Include authentication information in currentOp results
- Closed