[SERVER-17908] Allow getCmdLineOpts to be executed locally against an arbiter in an authenticated replica set Created: 07/Apr/15  Updated: 19/Sep/15  Resolved: 07/Apr/15

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 3.0.1
Fix Version/s: 3.0.3, 3.1.2

Type: Bug Priority: Major - P3
Reporter: Cailin Nelson Assignee: Amalia Hawkins
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
Backwards Compatibility: Fully Compatible
Backport Completed:
Sprint: Security 2 04/24/15
Participants:

 Description   
Issue Status as of Apr 29, 2015

ISSUE SUMMARY
Because arbiters do not replicate data, they do not have a copy of a replica set's credentials, and therefore refuse all authentication attempts when auth is required. As a result certain operations required for basic maintenance and for integration with MMS, that were previousily available via the localhost exception, are no longer possible.

This change makes following operations available to clients that have access to an arbiter via the localhost exception:

  • getCmdLineOpts
  • serverStatus
  • getParameter
  • shutdown

WORKAROUNDS
None.

AFFECTED VERSIONS

3.0.0, 3.0.1, and 3.0.2

FIX VERSION
The fix is included in the 3.0.3 production release.

Original description

In 2.6.x it was possible to execute getCmdLineOpts against an arbiter in an authenticated replica set. In 3.0.1 it is not.

Please restore the ability to execute getCmdLineOpts against an arbiter in an authenticated replica set, at least from localhost.



 Comments   
Comment by Githook User [ 09/Apr/15 ]

Author:

{u'username': u'hawka', u'name': u'Amalia Hawkins', u'email': u'amalia.hawkins@10gen.com'}

Message: SERVER-17908 Allow getCmdLineOpts to be executed locally against an arbiter in an authenticated replica set

(cherry picked from commit 72543912dca4117e1deb45a56c599657a1bf747c)
Branch: v3.0
https://github.com/mongodb/mongo/commit/9a4fec8245ca1f50efa3e5282d0e6f7a7361c244

Comment by Githook User [ 07/Apr/15 ]

Author:

{u'username': u'hawka', u'name': u'Amalia Hawkins', u'email': u'amalia.hawkins@10gen.com'}

Message: SERVER-17908 Allow getCmdLineOpts to be executed locally against an arbiter in an authenticated replica set
Branch: master
https://github.com/mongodb/mongo/commit/72543912dca4117e1deb45a56c599657a1bf747c

Generated at Thu Feb 08 03:45:58 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.