[SERVER-26101] DBDirectClient isn't safe to auth Created: 13/Sep/16  Updated: 03/Mar/18  Resolved: 27/Sep/16

Status: Closed
Project: Core Server
Component/s: Internal Client
Affects Version/s: 3.2.9
Fix Version/s: 3.2.13, 3.3.15

Type: Bug Priority: Major - P3
Reporter: Mira Carey Assignee: Matt Cotter
Resolution: Done Votes: 0
Labels: bkp
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Related
related to SERVER-33648 Attempting to perform user- and role-... Closed
related to SERVER-26257 DBDirectClient should not support auth Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Backport Requested:
v3.2
Steps To Reproduce:

db.eval('db.auth("reader", "reader")')

Sprint: Platforms 2017-03-27
Participants:
Linked BF Score: 0

 Description   

DBDirectClient doesn't have a port/session (3.2 versus master), so failures in auth (which try to look up the remote address when forming an error) crash the server or trigger a verify.



 Comments   
Comment by Githook User [ 11/Apr/17 ]

Author:

{u'username': u'Machyne', u'name': u'Matt Cotter', u'email': u'matt.cotter@mongodb.com'}

Message: SERVER-26101 DBDirectClient isn't safe to auth

(cherry picked from commit 73365935a7d2026030a34d89463e72263fe8c25c)
Branch: v3.2
https://github.com/mongodb/mongo/commit/0b3006eacb51de20c1d45dcc0d704eb1a2838d07

Comment by Githook User [ 27/Sep/16 ]

Author:

{u'username': u'Machyne', u'name': u'Matt Cotter', u'email': u'matt.cotter@mongodb.com'}

Message: SERVER-26101 DBDirectClient isn't safe to auth
Branch: master
https://github.com/mongodb/mongo/commit/73365935a7d2026030a34d89463e72263fe8c25c

Comment by Charlie Swanson [ 23/Sep/16 ]

Reverted due to BF-3597. Note I also had to revert the lint fix, so don't forget that part after re-resolving!

Comment by Githook User [ 23/Sep/16 ]

Author:

{u'username': u'cswanson310', u'name': u'Charlie Swanson', u'email': u'cswanson310@gmail.com'}

Message: Revert "SERVER-26101 DBDirectClient isn't safe to auth"

This reverts commit 168d00f4aacf2f6f792009e0e5049706af43b9e5.
Branch: master
https://github.com/mongodb/mongo/commit/af7f8ccc65fe5527b7c1dc47f91f78c46ec33ea3

Comment by Githook User [ 22/Sep/16 ]

Author:

{u'username': u'markbenvenuto', u'name': u'Mark Benvenuto', u'email': u'mark.benvenuto@mongodb.com'}

Message: SERVER-26101 DBDirectClient isn't safe to auth
Branch: master
https://github.com/mongodb/mongo/commit/168d00f4aacf2f6f792009e0e5049706af43b9e5

Generated at Thu Feb 08 04:11:09 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.