-
Type:
Bug
-
Resolution: Works as Designed
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
-
Server Security
-
ALL
-
Security 2024-12-23, Security 2025-01-20, RnD Security 2025-03-03, Security 2025-03-17
-
None
-
3
-
None
-
None
-
None
-
None
-
None
-
None
When querying the value of 'ldapServers' for mongod with this startup config:
ConfigFile : net: bindIp: 0.0.0.0 port: 9001 processManagement: fork: "true" replication: replSetName: a security: authorization: enabled keyFile: /tmp/mms-automation/test/output/keyfile.keyfile ldap: authz: queryTemplate: '{USER}?memberOf' bind: method: simple queryPassword: <REDACTED> queryUser: uid=testserviceaccount,ou=serviceaccounts,dc=babypearfoo,dc=com servers: localhost:1389 transportSecurity: none userToDNMapping: '[{match: "(.+)", substitution: "uid={0},ou=users,dc=babypearfoo,dc=com"}]' setParameter: authenticationMechanisms: PLAIN storage: dbPath: /tmp/mms-automation/test/output/data/process9001 systemLog: destination: file path: /tmp/mms-automation/test/logs/LdapFullSuite_TestNativeAuthzLocalRotation_run9001_0
With the following query:
[{getParameter [{showDetails true}]} {ldapQueryPassword 1} {authenticationMechanisms 1} {ldapUserToDNMapping 1} {ldapQueryUser 1} {ldapAuthzQueryTemplate 1} {ldapServers 1}]
I see the following response:
{"$clusterTime":{"clusterTime":{"T":1733169046,"I":1},"signature":{"hash":{"Subtype":0,"Data":"AAAAAAAAAAAAAAAAAAAAAAAAAAA="},"keyId":0}},"authenticationMechanisms":{"settableAtRuntime":false,"settableAtStartup":true,"value":["PLAIN"]},"ldapAuthzQueryTemplate":{"settableAtRuntime":true,"settableAtStartup":false,"value":"{USER}?memberOf"},"ldapQueryPassword":{"settableAtRuntime":true,"settableAtStartup":false,"value":"###"},"ldapQueryUser":{"settableAtRuntime":true,"settableAtStartup":false,"value":"uid=testserviceaccount,ou=serviceaccounts,dc=babypearfoo,dc=com"},"ldapServers":{"settableAtRuntime":true,"settableAtStartup":false,"value":"localhost"},"ldapUserToDNMapping":{"settableAtRuntime":true,"settableAtStartup":false,"value":"[{match: \"(.+)\", substitution: \"uid={0},ou=users,dc=babypearfoo,dc=com\"}]"},"ok":1,"operationTime":{"T":1733169046,"I":1}}
ldapServers just says "localhost" instead of "localhost:1389". This feels like a bug to me but let me know if it is expected behavior