[COMPASS-4529] Authentication fails with Kerberos when service name is not mongodb Created: 09/Dec/20  Updated: 29/Oct/23  Resolved: 21/Jul/21

Status: Closed
Project: Compass
Component/s: Connectivity
Affects Version/s: None
Fix Version/s: 1.28.4

Type: Bug Priority: Major - P3
Reporter: Sergey Petushkov Assignee: Michael Rose (Inactive)
Resolution: Fixed Votes: 1
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Epic Link: COMPASS-4362
Story Points: 3
Documentation Changes: Not Needed
Sprint: Iteration Geneva

 Description   

Problem Description

When trying to authenticate with Kerberos with a service name different from mongodb it fails with

Miscellaneous failure (see text): Error from KDC: LOOKING_UP_SERVER while looking up 'mongodb/mongodb-kerberos-2.example.com@EXAMPLE.COM' (cached result, timeout in 850 sec) (negative cache)

Steps to Reproduce

  • Start mongodb with kerberos auth locally using the devtools docker template
  • Try to connect to second mongodb instance that is using "alternate" service name for Kerberos auth:

mongodb://mongodb.user%40EXAMPLE.COM@mongodb-kerberos-2.example.com:29018/?gssapiServiceName=alternate&authMechanism=GSSAPI&authSource=%24external

Expected Results

I can sign in without issues

Actual Results

Auth error is shown

Additional Notes



 Comments   
Comment by Githook User [ 25/Aug/21 ]

Author:

{'name': 'Michael Rose', 'email': 'michael_rose@gmx.de', 'username': 'rose-m'}

Message: fix(compass-connect,connection-model): support all Kerberos options COMPASS-4529 (#2335)
Branch: 1.28-releases
https://github.com/mongodb-js/compass/commit/6a2f0ce175f4d65ec36219b381eb3dd6672c7570

Comment by Githook User [ 21/Jul/21 ]

Author:

{'name': 'Michael Rose', 'email': 'michael_rose@gmx.de', 'username': 'rose-m'}

Message: fix(compass-connect,connection-model): support all Kerberos options COMPASS-4529 (#2335)
Branch: changelog-with-options
https://github.com/mongodb-js/compass/commit/6a2f0ce175f4d65ec36219b381eb3dd6672c7570

Comment by Githook User [ 21/Jul/21 ]

Author:

{'name': 'Michael Rose', 'email': 'michael_rose@gmx.de', 'username': 'rose-m'}

Message: fix(compass-connect,connection-model): support all Kerberos options COMPASS-4529 (#2335)
Branch: install-before-publish
https://github.com/mongodb-js/compass/commit/6a2f0ce175f4d65ec36219b381eb3dd6672c7570

Comment by Githook User [ 21/Jul/21 ]

Author:

{'name': 'Michael Rose', 'email': 'michael_rose@gmx.de', 'username': 'rose-m'}

Message: fix(compass-connect,connection-model): support all Kerberos options COMPASS-4529 (#2335)
Branch: main
https://github.com/mongodb-js/compass/commit/6a2f0ce175f4d65ec36219b381eb3dd6672c7570

Comment by Githook User [ 19/Jul/21 ]

Author:

{'name': 'Michael Rose', 'email': 'michael_rose@gmx.de', 'username': 'rose-m'}

Message: fix(compass-connect,connection-model): support all Kerberos options COMPASS-4529
Branch: COMPASS-4529-kerberos-authentication
https://github.com/mongodb-js/compass/commit/b9f8be011c805cb347a4e1114bf552fec83caf4f

Comment by Githook User [ 09/Jul/21 ]

Author:

{'name': 'Michael Rose', 'email': 'michael_rose@gmx.de', 'username': 'rose-m'}

Message: fix(compass-connect,connection-model): support all Kerberos options COMPASS-4529
Branch: COMPASS-4529-kerberos-authentication
https://github.com/mongodb-js/compass/commit/9063076ae8109962eae5429b9cabe8c740955d7f

Comment by Githook User [ 08/Jul/21 ]

Author:

{'name': 'Michael Rose', 'email': 'michael_rose@gmx.de', 'username': 'rose-m'}

Message: fix(compass-connect,connection-model): support all Kerberos options COMPASS-4529
Branch: COMPASS-4529-kerberos-authentication
https://github.com/mongodb-js/compass/commit/b9578260d5a81b4a53863f8ebc64d07b3139ee50

Generated at Wed Feb 07 22:36:40 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.