[SERVER-16465] [Create|Update]User command should not allow the "mechanism" field Created: 08/Dec/14  Updated: 18/Dec/14  Resolved: 17/Dec/14

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 2.8.0-rc2
Fix Version/s: 2.8.0-rc3

Type: Bug Priority: Major - P3
Reporter: Chunming Li (Inactive) Assignee: Andreas Nilsson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Operating System: ALL
Participants:

 Description   

The symptom is that I can specify mechanism=MONGODB-CR when creating a new user without getting any error message, but later I cannot auth using MONGODB-CR for that new user. Confusing.
Since this field does not make sense in a 2.8+ world, we should just remove it.

Reference:
https://github.com/mongodb/mongo/blob/master/src/mongo/db/auth/user_management_commands_parser.cpp#L243
https://github.com/mongodb/mongo/blob/master/src/mongo/db/commands/user_management_commands.cpp#L424-L427



 Comments   
Comment by Githook User [ 17/Dec/14 ]

Author:

{u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}

Message: SERVER-16465 Removed mech parameter from [create|update]User commands
Branch: master
https://github.com/mongodb/mongo/commit/f312681a62f15196d0638da50350dd6a9c693e36

Generated at Thu Feb 08 03:41:08 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.