[SERVER-10353] Cannot disable MONGODB-X509 in enterprise build. Created: 26/Jul/13 Updated: 11/Jul/16 Resolved: 30/Oct/13 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Security |
| Affects Version/s: | None |
| Fix Version/s: | 2.5.4 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Andy Schwerin | Assignee: | Andreas Nilsson |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Operating System: | ALL |
| Participants: |
| Description |
|
In the enterprise build, operators enumerate the list of enabled authentication mechanisms via --setParameter authenticationMechanisms=<comma-separated list of mech names>. Right now, MONGODB-X509 is not properly handled by this logic. |
| Comments |
| Comment by Andreas Nilsson [ 29/Oct/13 ] |
|
Fixed x509_client.js on the non-enterprise builders. Suspect that the disablex509.js might not be mine. |
| Comment by auto [ 29/Oct/13 ] |
|
Author: {u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}Message: |
| Comment by Andreas Nilsson [ 29/Oct/13 ] |
|
I do not understand how a single line change to another test can cause this test to not be able to write to a data dir. Sounds suspicious to me, can we investigate together? |
| Comment by auto [ 29/Oct/13 ] |
|
Author: {u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}Message: |
| Comment by auto [ 29/Oct/13 ] |
|
Author: {u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}Message: |
| Comment by auto [ 29/Oct/13 ] |
|
Author: {u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}Message: |
| Comment by Andreas Nilsson [ 24/Oct/13 ] |
|
schwerin So right now MONGODB-X509 is enabled by default like MONGODB-CR. How would I even go about disabling it? Does this mean it should be disabled by default and then enabled using setParameter? It's a little different than GSSAPI since it is on in the free product too. |