[SERVER-12042] ERROR unsupported modification to roles collection in oplog Created: 11/Dec/13 Updated: 11/Jul/16 Resolved: 13/Dec/13 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Security |
| Affects Version/s: | 2.5.4 |
| Fix Version/s: | 2.5.5 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Tyler Brock | Assignee: | Andy Schwerin |
| Resolution: | Done | Votes: | 0 |
| Labels: | 26qa | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||
| Operating System: | ALL | ||||
| Steps To Reproduce: | $ mongo --norc > db.runCommand("authSchemaUpgradeStep") { "done" : true, "ok" : 1 } |
||||
| Participants: | |||||
| Description |
|
Running the authSchemaUpgradeStep's second phase on a standalone node produces the following message in my log: ERROR: Unsupported modification to roles collection in oplog; TODO how to remedy. OplogOperationUnsupported Unsupported oplog operation Oplog entry: c |
| Comments |
| Comment by Githook User [ 13/Dec/13 ] | ||||||||||||||||||||
|
Author: {u'username': u'andy10gen', u'name': u'Andy Schwerin', u'email': u'schwerin@10gen.com'}Message: | ||||||||||||||||||||
| Comment by Spencer Brody (Inactive) [ 12/Dec/13 ] | ||||||||||||||||||||
|
Looks like the problem is that deleteIndexes is a valid synonym for dropIndexes (and the c++ driver's dropIndex and dropIndexes methods actually use deleteIndexes), but we don't handle that in role_graph_update.cpp or authorization_manager.cpp | ||||||||||||||||||||
| Comment by Valeri Karpov [ 12/Dec/13 ] | ||||||||||||||||||||
|
schwerin Here's the oplog output that you wanted from the standalone config server:
| ||||||||||||||||||||
| Comment by Valeri Karpov [ 11/Dec/13 ] | ||||||||||||||||||||
|
For me, doesn't happen when you run it on a standalone, but does happen when running authSchemaUpgradeStep on a mongos... | ||||||||||||||||||||
| Comment by Tyler Brock [ 11/Dec/13 ] | ||||||||||||||||||||
|
Update, this also happens on a replica set. The error is printed in the log of every node: 2013-12-11T11:32:20.452-0500 [repl writer worker 2] ERROR: Unsupported modification to roles collection in oplog; TODO how to remedy. OplogOperationU From the oplog:
| ||||||||||||||||||||
| Comment by Tyler Brock [ 11/Dec/13 ] | ||||||||||||||||||||
|
There doesn't even seem to be an oplog, which is expected, as this is a standalone node: > use local |