[SERVER-15048] Copying the admin database without --auth may cause secondaries to shut down Created: 26/Aug/14  Updated: 10/Aug/18  Resolved: 10/Aug/18

Status: Closed
Project: Core Server
Component/s: Replication, Security
Affects Version/s: 2.6.4, 2.7.5
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Kamran K. Assignee: Maria van Keulen
Resolution: Done Votes: 0
Labels: 28qa, fuzzer-blacklist, platforms_security
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
Operating System: ALL
Sprint: Storage NYC 2018-08-13
Participants:

 Description   

This bug affects 2.6.x and 2.7.x.

 m31002| 2014-08-26T18:13:45.470-0400 E REPLSETS [repl writer worker 1] writer worker caught exception:  :: caused by :: 10156 cannot update system collection: foo2.system.version q: { _id: "authSchema" } u: { _id: "authSchema", currentVersion: 3 } on: { ts: Timestamp 1409091225000|5, h: -2803074681943705287, v: 2, op: "i", ns: "foo2.system.version", o: { _id: "authSchema", currentVersion: 3 } }
 m31002| 2014-08-26T18:13:45.470-0400 I          [repl writer worker 1] Fatal Assertion 16360
 m31002| 2014-08-26T18:13:45.470-0400 I          [repl writer worker 1] 
 m31002| 
 m31002| ***aborting after fassert() failure



 Comments   
Comment by Maria van Keulen [ 10/Aug/18 ]

Closing since the copyDB command was removed as of SERVER-36257.

Comment by Eric Milkie [ 29/Aug/14 ]

If one attempts to copy the admin database to another database on the same server, and replication is turned on, and authorization checking is turned off, the copy may not replicate correctly and secondaries will shut down.
The problem can also occur if authorization checking is turned on and you grant a custom role to a user that allows copying the admin database.
The workaround is to turn on authorization checking (--auth), or to simply not attempt to copy the admin database to another database name within the same server.

Generated at Thu Feb 08 03:36:46 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.