[SERVER-15606] Use same service account names irrespective of platform Created: 10/Oct/14  Updated: 20/Mar/23  Resolved: 20/Mar/23

Status: Closed
Project: Core Server
Component/s: Packaging
Affects Version/s: None
Fix Version/s: features we're not sure of

Type: Improvement Priority: Minor - P4
Reporter: Anil Kumar Assignee: [DO NOT ASSIGN] Backlog - Server Development Platform Team (SDP) (Inactive)
Resolution: Won't Fix Votes: 0
Labels: build-later, build-needs-definition
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
related to SERVER-13016 Preserve 2.4 configuration defaults i... Closed
Assigned Teams:
Server Development Platform
Participants:

 Description   

Currently debian packaging creates mongodb user / group name as part of installation and the same is used for running mongod / mongos services.

The same in rpm packaging creates mongod user / group name as part of installation.

If there are no specific reasons for these to diverge, all packaging that creates new user / group should adhere to same names.



 Comments   
Comment by Alex Neben [ 20/Mar/23 ]

Not worth breaking packaging upgrades

Comment by Alex Neben [ 31/Jan/23 ]

On an uninstall we could remove both users and on install we would only add the mongodb user. I think the implications here is that it could break some people's scripts and maybe some configuration things? If people assumed mongod was the user then that would no longer be true. If they gave that user special permissions or had things like "runas mongod" then that would break.

Comment by Cristopher Stauffer [ 29/Jan/23 ]

Consistency makes sense here. What are the implications of changing this (and backporting it), does it break current installations on upgrade?

Comment by Alex Neben [ 28/Jan/23 ]

trevor.guidry@mongodb.com the fix here should be pretty simple. The hard part of this ticket is making sure mongodb is aligned on this change because it will require some patch notes. Before this is worked on please get some sign off from product (I think cristopher.stauffer@mongodb.com would be a good rep). If not sync with jeff.zambory@mongodb.com about who else we could get in product to do this with us.

Depending on feedback from poduct this may need to backported all the way to 4.2.

Comment by Alex Neben [ 30/Dec/22 ]

alex.ettouati@mongodb.com cristopher.stauffer@mongodb.com 
This issue is super annoying and it really should be fixed. Is there any reason we can't do this?

Generated at Thu Feb 08 03:38:29 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.