[DOCS-3854] emphasize that clusterAuthMode should be set to X509 on all system components Created: 01/Aug/14  Updated: 11/Jan/17  Resolved: 20/May/16

Status: Closed
Project: Documentation
Component/s: manual
Affects Version/s: None
Fix Version/s: 01112017-cleanup

Type: Task Priority: Major - P3
Reporter: Alexander Komyagin Assignee: Ravind Kumar (Inactive)
Resolution: Done Votes: 0
Labels: security-revew
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

https://docs.mongodb.org/manual/tutorial/configure-x509-member-authentication/

https://docs.mongodb.org/manual/tutorial/configure-x509-client-authentication/


Issue Links:
Related
Participants:
Days since reply: 7 years, 38 weeks, 6 days ago

 Description   

we should be explicit that for sharded clusters the clusterAuthMode setting should be the same on all cluster members: mongoS,mongoD, config servers



 Comments   
Comment by Githook User [ 19/May/16 ]

Author:

{u'username': u'rkumar-mongo', u'name': u'ravind', u'email': u'ravind.kumar@10gen.com'}

Message: DOCS-3854: emphasize uniform clusterAuthMode setting

  • Also added callout noting internal auth enables
    access control with callouts to the user tutorials

Signed-off-by: kay <kay.kim@10gen.com>
Branch: v3.0
https://github.com/mongodb/docs/commit/c668794d9a64cc60ad9eb6a54c6d23f24f34166b

Comment by Githook User [ 19/May/16 ]

Author:

{u'username': u'rkumar-mongo', u'name': u'ravind', u'email': u'ravind.kumar@10gen.com'}

Message: DOCS-3854: emphasize uniform clusterAuthMode setting

  • Also added callout noting internal auth enables
    access control with callouts to the user tutorials

Signed-off-by: kay <kay.kim@10gen.com>
Branch: master
https://github.com/mongodb/docs/commit/bb6213b87a5e1bf5f4bef61f56002dfcda6a2b02

Comment by Ravind Kumar (Inactive) [ 21/Apr/16 ]

Strictly speaking, at this time --clusterAuthMode supports sendKeyFile and sendX509, which allows for
the various components of the cluster to have differing clusterAuthMode settings. This is only during rolling upgrade procedures, however.

For the two tutorials that involve deployment, a callout noting the requirement should suffice.

Generated at Thu Feb 08 07:46:39 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.