[SERVER-28653] MongoLDAP shouldn't print "FAIL" in correct environments Created: 06/Apr/17  Updated: 13/Jun/18  Resolved: 12/Jun/18

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: 4.1.1

Type: Improvement Priority: Major - P3
Reporter: Spencer Jackson Assignee: Kashish Garg
Resolution: Done Votes: 0
Labels: neweng
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Backwards Compatibility: Fully Compatible
Sprint: Platforms 2018-06-18
Participants:

 Description   

Here is a mongoldap log, in which everything works correctly. LDAP authorization is disabled, so we're just testing LDAP authentication.

sajack@spencerLaptop /home/sajack/mongo git master () % LDAPTLS_CACERT=/home/sajack/mongo-enterprise-modules/jstests/external_auth/assets/ldaptest-ca.pem ./mongoldap --ldapServers ldaptest.10gen.cc --user cn=ldapz_kerberos1,ou=Users,dc=10gen,dc=cc --password Secret123
Running MongoDB LDAP authorization validation checks...
Version: 0.0.0
 
Checking that an LDAP server has been specified...
[OK] LDAP server found
 
Connecting to LDAP server...
[OK] Connected to LDAP server
 
Attempting to authenticate against the LDAP server...
[OK] Successful authentication performed
 
Checking if LDAP authorization has been enabled by configuration...
[FAIL] LDAP authorization is not enabled, the configuration will require internal users to be maintained
	* Make sure you have 'security.ldap.authz.queryTemplate' in your configuration

Reading the last entry, and the all caps "FAIL" statement, an administrator may believe this process has failed.

This is not necessarily helpful, and may make a user believe something bad has happened when everything is actually fine.

Non-fatal assertions should probably fail with the string "INFO" in the left hand side of the output.



 Comments   
Comment by Githook User [ 12/Jun/18 ]

Author:

{'name': 'Kashish Garg', 'email': 'kashish.garg@mongodb.com'}

Message: SERVER-28653 MongoLDAP shouldn't print FAIL in correct environments
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/188f181cdcd3ab701fe4b371b175b288c0213f68

Comment by Andrew Morrow (Inactive) [ 07/Apr/17 ]

spencer.jackson - Title is a little hard to decode, please make it a little clearer.

Generated at Thu Feb 08 04:18:43 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.