[SERVER-32964] Make db.createUser shell helper generate hashes server side Created: 29/Jan/18  Updated: 23/Apr/18  Resolved: 26/Feb/18

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Major - P3
Reporter: Spencer Jackson Assignee: Spencer Jackson
Resolution: Duplicate Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Duplicate
is duplicated by SERVER-32974 Enhance createUser and updateUser to ... Closed
Sprint: Platforms 2018-02-12, Platforms 2018-02-26
Participants:

 Description   

The db.createUser shell helper currently generates hashes client side. We should move this work to the server.



 Comments   
Comment by Spencer Jackson [ 26/Feb/18 ]

I'm going to close this out.

Comment by Sara Golemon [ 15/Feb/18 ]

The essential piece of this was done in SERVER-32974.
We still allow client-side digesting if it's explicitly asked for, though that will obviously break if a mechanism other that SCRAM-SHA-1 is asked for (implicitly or explciitly).

spencer.jackson Should we just close this as done? Or do you want to put an end to client-side hashing entirely?

Generated at Thu Feb 08 04:31:51 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.