[SERVER-36456] MongoD does not support kerberos on Windows Created: 04/Aug/18  Updated: 29/Oct/23  Resolved: 14/Sep/18

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 4.0.0
Fix Version/s: 4.0.3, 4.1.4

Type: Bug Priority: Major - P3
Reporter: Mark Benvenuto Assignee: Mark Benvenuto
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Depends
Duplicate
duplicates SERVER-10700 automated test for Windows SSPI Closed
duplicates SERVER-24671 Add support for GSSAPI on Windows ext... Closed
Problem/Incident
is caused by SERVER-30491 LDAP authorisation tries to transform... Closed
Related
is related to SERVER-33993 (kerberos) failed to connect if the p... Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Backport Requested:
v4.0
Sprint: Security 2018-09-10, Security 2018-09-24
Participants:

 Description   

Using the tutorial, MongoD when running on Windows does not support Kerberos authentication (i.e. GSSAPI).

The issue is that in SERVER-30491, MongoDB's custom auxprop was removed. This broke support for kerberos since mongod calls canon_user which now always fails since there is no auxprop plugin.



 Comments   
Comment by Githook User [ 18/Sep/18 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-36456 MongoD does not support kerberos on Windows

(cherry picked from commit b2e668b336da2de233c9396ec2ee798f88e36166)
Branch: v4.0
https://github.com/10gen/mongo-enterprise-modules/commit/6f24075ae868f9c32c87abc2685359e5371f788e

Comment by Githook User [ 17/Sep/18 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-36456 MongoD does not support kerberos on Windows

(cherry picked from commit 7daa72a1600fae6753034ca1bcdfd7eeceedb6ae)
Branch: v4.0
https://github.com/mongodb/mongo/commit/e2d6958949c7d0ae4808fb760005cafaffc942e7

Comment by Githook User [ 14/Sep/18 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-36456 MongoD does not support kerberos on Windows
Branch: master
https://github.com/10gen/mongo-enterprise-modules/commit/b2e668b336da2de233c9396ec2ee798f88e36166

Comment by Githook User [ 14/Sep/18 ]

Author:

{'name': 'Mark Benvenuto', 'email': 'mark.benvenuto@mongodb.com', 'username': 'markbenvenuto'}

Message: SERVER-36456 MongoD does not support kerberos on Windows
Branch: master
https://github.com/mongodb/mongo/commit/7daa72a1600fae6753034ca1bcdfd7eeceedb6ae

Generated at Thu Feb 08 04:43:09 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.