[SERVER-26101] DBDirectClient isn't safe to auth Created: 13/Sep/16 Updated: 03/Mar/18 Resolved: 27/Sep/16 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Internal Client |
| Affects Version/s: | 3.2.9 |
| Fix Version/s: | 3.2.13, 3.3.15 |
| Type: | Bug | Priority: | Major - P3 |
| Reporter: | Mira Carey | Assignee: | Matt Cotter |
| Resolution: | Done | Votes: | 0 |
| Labels: | bkp | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||||||
| Backwards Compatibility: | Fully Compatible | ||||||||||||||||
| Operating System: | ALL | ||||||||||||||||
| Backport Requested: |
v3.2
|
||||||||||||||||
| Steps To Reproduce: | db.eval('db.auth("reader", "reader")') |
||||||||||||||||
| Sprint: | Platforms 2017-03-27 | ||||||||||||||||
| Participants: | |||||||||||||||||
| Linked BF Score: | 0 | ||||||||||||||||
| Description |
|
DBDirectClient doesn't have a port/session (3.2 versus master), so failures in auth (which try to look up the remote address when forming an error) crash the server or trigger a verify. |
| Comments |
| Comment by Githook User [ 11/Apr/17 ] |
|
Author: {u'username': u'Machyne', u'name': u'Matt Cotter', u'email': u'matt.cotter@mongodb.com'}Message: (cherry picked from commit 73365935a7d2026030a34d89463e72263fe8c25c) |
| Comment by Githook User [ 27/Sep/16 ] |
|
Author: {u'username': u'Machyne', u'name': u'Matt Cotter', u'email': u'matt.cotter@mongodb.com'}Message: |
| Comment by Charlie Swanson [ 23/Sep/16 ] |
|
Reverted due to BF-3597. Note I also had to revert the lint fix, so don't forget that part after re-resolving! |
| Comment by Githook User [ 23/Sep/16 ] |
|
Author: {u'username': u'cswanson310', u'name': u'Charlie Swanson', u'email': u'cswanson310@gmail.com'}Message: Revert " This reverts commit 168d00f4aacf2f6f792009e0e5049706af43b9e5. |
| Comment by Githook User [ 22/Sep/16 ] |
|
Author: {u'username': u'markbenvenuto', u'name': u'Mark Benvenuto', u'email': u'mark.benvenuto@mongodb.com'}Message: |