[SERVER-20845] re-add replSetReconfig to auditing suite Created: 09/Oct/15  Updated: 15/Nov/21  Resolved: 11/Sep/18

Status: Closed
Project: Core Server
Component/s: Replication, Security
Affects Version/s: None
Fix Version/s: 3.6.9, 4.0.4, 4.1.3

Type: Bug Priority: Major - P3
Reporter: Andreas Nilsson Assignee: Spencer Jackson
Resolution: Done Votes: 1
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Depends
Documented
is documented by DOCS-12054 Docs for SERVER-20845: re-add replSet... Closed
Duplicate
is duplicated by SERVER-36172 Audit logging for replSetConfigure ac... Closed
Gantt Dependency
has to be done before SERVER-37118 Coverity analysis defect 105000: Argu... Closed
Related
related to SERVER-37118 Coverity analysis defect 105000: Argu... Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Backport Requested:
v4.0, v3.6
Steps To Reproduce:

Grep for audit::logReplSetReconfig or run the auditing test suite with the flag -c replSet.

Sprint: Repl C (11/20/15), Security 2018-09-10, Security 2018-09-24
Participants:

 Description   

The call to logReplSetReconfig seems to have been accidentally removed as part of the replication system re-write.



 Comments   
Comment by Githook User [ 12/Oct/18 ]

Author:

{'name': 'Spencer Jackson', 'email': 'spencer.jackson@mongodb.com', 'username': 'spencerjackson'}

Message: SERVER-20845: Add replSetReconfig audit hook

(cherry picked from commit 97654b6e8bb1108524d0105d6f54ce93b636f984)
Branch: v4.0
https://github.com/mongodb/mongo/commit/384f149895dde9d21b6c8f71c99d10656381bf50

Comment by Githook User [ 12/Oct/18 ]

Author:

{'name': 'Spencer Jackson', 'email': 'spencer.jackson@mongodb.com', 'username': 'spencerjackson'}

Message: SERVER-20845: Add replSetReconfig audit hook

(cherry picked from commit 10ee63a27a358f9268fb1cf000f9b45c130111c4)
Branch: v4.0
https://github.com/10gen/mongo-enterprise-modules/commit/e4a3c9e973ccc66462215248f159ef79326583ee

Comment by 章 黒鉄 [ 04/Oct/18 ]

Thanks Spencer for patch and the backport.

Comment by Githook User [ 29/Sep/18 ]

Author:

{'name': 'Spencer Jackson', 'email': 'spencer.jackson@mongodb.com', 'username': 'spencerjackson'}

Message: SERVER-20845: Add replSetReconfig audit hook

(cherry picked from commit 97654b6e8bb1108524d0105d6f54ce93b636f984)
Branch: v3.6
https://github.com/mongodb/mongo/commit/7fe30099c353af609b25b50fb7465f046430815d

Comment by Githook User [ 29/Sep/18 ]

Author:

{'name': 'Spencer Jackson', 'email': 'spencer.jackson@mongodb.com', 'username': 'spencerjackson'}

Message: SERVER-20845: Add replSetReconfig audit hook

(cherry picked from commit 10ee63a27a358f9268fb1cf000f9b45c130111c4)
Branch: v3.6
https://github.com/10gen/mongo-enterprise-modules/commit/a0d3c8d0d8480fd1ca2f31b3ffeaceebc5f3d986

Comment by Ramon Fernandez Marina [ 13/Sep/18 ]

Requesting backports as per akira's last comment.

Comment by 章 黒鉄 [ 12/Sep/18 ]

May I ask if a backport to 3.6 is feasible?

Comment by Githook User [ 11/Sep/18 ]

Author:

{'name': 'Spencer Jackson', 'email': 'spencer.jackson@mongodb.com', 'username': 'spencerjackson'}

Message: SERVER-20845: Add replSetReconfig audit hook
Branch: master
https://github.com/mongodb/mongo/commit/97654b6e8bb1108524d0105d6f54ce93b636f984

Comment by Githook User [ 11/Sep/18 ]

Author:

{'name': 'Spencer Jackson', 'email': 'spencer.jackson@mongodb.com', 'username': 'spencerjackson'}

Message: SERVER-20845: Add replSetReconfig audit hook
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/10ee63a27a358f9268fb1cf000f9b45c130111c4

Comment by 章 黒鉄 [ 24/Jul/18 ]

Thanks!

Comment by Andrew Morrow (Inactive) [ 18/Jul/18 ]

Moving back to Needs Triage so we can take a look.

Comment by Ramon Fernandez Marina [ 14/Nov/15 ]

Reopening ticket as change was reverted.

Comment by Githook User [ 13/Nov/15 ]

Author:

{u'username': u'spencerjackson', u'name': u'Spencer Jackson', u'email': u'spencer.jackson@mongodb.com'}

Message: Revert "SERVER-20845 audit log reconfigs"

This reverts commit 766b3e3508b7c1025dfc55ea8a4a01179989c9f4.
Branch: master
https://github.com/mongodb/mongo/commit/ba65cade1f0ba76c921364300d1f33cff5f35043

Comment by Githook User [ 13/Nov/15 ]

Author:

{u'username': u'dannenberg', u'name': u'matt dannenberg', u'email': u'matt.dannenberg@10gen.com'}

Message: SERVER-20845 audit log reconfigs
Branch: master
https://github.com/mongodb/mongo/commit/766b3e3508b7c1025dfc55ea8a4a01179989c9f4

Comment by Githook User [ 19/Oct/15 ]

Author:

{u'username': u'dannenberg', u'name': u'matt dannenberg', u'email': u'matt.dannenberg@10gen.com'}

Message: SERVER-20845 remove audit::logReplSetReconfig to green up enterprise builders
Branch: master
https://github.com/mongodb/mongo/commit/16b1fae1bb0b31303b987a91e61668ac4fa7b513

Comment by Githook User [ 16/Oct/15 ]

Author:

{u'username': u'dannenberg', u'name': u'matt dannenberg', u'email': u'matt.dannenberg@10gen.com'}

Message: SERVER-20845 restore auditing of replSetReconfigs
Branch: master
https://github.com/mongodb/mongo/commit/755fea23f219666f2e5d5de25d087baeacef1503

Comment by Githook User [ 16/Oct/15 ]

Author:

{u'username': u'dannenberg', u'name': u'matt dannenberg', u'email': u'matt.dannenberg@10gen.com'}

Message: SERVER-20845 restore auditing of replSetReconfigs
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/6e5e2450a323515cc9c264036ad5336399a18a9f

Comment by Eric Milkie [ 15/Oct/15 ]

Need to add these lines, from 2.6:

            BSONObj oldConfForAudit = config().asBson();
            BSONObj newConfForAudit = newConfig.asBson();
            audit::logReplSetReconfig(ClientBasic::getCurrent(),
                                      &oldConfForAudit,
                                      &newConfForAudit);

Generated at Thu Feb 08 03:55:28 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.