[SERVER-10353] Cannot disable MONGODB-X509 in enterprise build. Created: 26/Jul/13  Updated: 11/Jul/16  Resolved: 30/Oct/13

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: 2.5.4

Type: Bug Priority: Major - P3
Reporter: Andy Schwerin Assignee: Andreas Nilsson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Operating System: ALL
Participants:

 Description   

In the enterprise build, operators enumerate the list of enabled authentication mechanisms via --setParameter authenticationMechanisms=<comma-separated list of mech names>. Right now, MONGODB-X509 is not properly handled by this logic.



 Comments   
Comment by Andreas Nilsson [ 29/Oct/13 ]

Fixed x509_client.js on the non-enterprise builders. Suspect that the disablex509.js might not be mine.

Comment by auto [ 29/Oct/13 ]

Author:

{u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}

Message: SERVER-10353 Fix for x509_client.js on non-enterprise builds
Branch: master
https://github.com/mongodb/mongo/commit/11a9388c7d8aa00316eae0d62ad93a85e9f6b648

Comment by Andreas Nilsson [ 29/Oct/13 ]

I do not understand how a single line change to another test can cause this test to not be able to write to a data dir. Sounds suspicious to me, can we investigate together?

Comment by auto [ 29/Oct/13 ]

Author:

{u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}

Message: SERVER-10353 Fixed x509_client.js for enterprise builds
Branch: master
https://github.com/mongodb/mongo/commit/97c3a3d2b487e9376d484d33ede2895e379a3033

Comment by auto [ 29/Oct/13 ]

Author:

{u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}

Message: SERVER-10353 Option to disable MONGODB-X509, server portion
Branch: master
https://github.com/mongodb/mongo/commit/f64377ea68e0f0003639672b886fc9e7be37942c

Comment by auto [ 29/Oct/13 ]

Author:

{u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}

Message: SERVER-10353 Option to disable MONGODB-x509
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/a436c5970c30be0eb7a8a29bebbd16b3479d7b14

Comment by Andreas Nilsson [ 24/Oct/13 ]

schwerin So right now MONGODB-X509 is enabled by default like MONGODB-CR. How would I even go about disabling it? Does this mean it should be disabled by default and then enabled using setParameter? It's a little different than GSSAPI since it is on in the free product too.

Generated at Thu Feb 08 03:22:56 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.