[SERVER-3837] BuildInfo shouldn't require auth Created: 13/Sep/11  Updated: 11/Jul/16  Resolved: 14/Nov/11

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 2.0.0
Fix Version/s: 2.0.2, 2.1.0

Type: Bug Priority: Major - P3
Reporter: Mathias Stearn Assignee: Eliot Horowitz (Inactive)
Resolution: Done Votes: 1
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
is depended on by CSHARP-324 Connect to mongod with auth fails Closed
Operating System: ALL
Participants:

 Comments   
Comment by auto [ 14/Nov/11 ]

Author:

{u'login': u'erh', u'name': u'Eliot Horowitz', u'email': u'eliot@10gen.com'}

Message: make buildInfo not require auth again (back to 1.8 behavior) SERVER-3837
Branch: v2.0
https://github.com/mongodb/mongo/commit/d4ba20e72751af8982ef1318cd3e61fa17f67fed

Comment by auto [ 14/Nov/11 ]

Author:

{u'login': u'erh', u'name': u'Eliot Horowitz', u'email': u'eliot@10gen.com'}

Message: make buildInfo not require auth again (back to 1.8 behavior) SERVER-3837
Branch: master
https://github.com/mongodb/mongo/commit/fa1c53294c172f15e9a89989c05703585f7f6f05

Comment by Jason McCay [ 09/Nov/11 ]

Thank you Eliot ... I am really appreciative of your willingness to open this back up. Will you update this when we can pull from a nightly?

Jason

Comment by Eliot Horowitz (Inactive) [ 08/Nov/11 ]

going to revert for now - we'll have to re-think some of these later

Comment by Jason McCay [ 07/Nov/11 ]

This has proven to be an issue for us with the Mongoid driver. We use authentication for our databases, but do not want all our users to be admins on the database (for various reasons) and since Mongoid requires buildinfo (and is a very popular driver in the Ruby community), it means that moving from 1.8.x to 2.0.x has been breaking a lot of applications.

Can this please be reconsidered? Why the change in this from 1.8 to 2.0?

Jason

Comment by Robert Stam [ 14/Sep/11 ]

The change to require auth for buildInfo broke the C# driver, which is using buildInfo at connect time to determine the version of the server it is connecting to.

On a related note, it is now no longer possible to call buildInfo without admin credentials. Seems totally unnecessary to require admin credentials just to find out what version of the server you are connected to.

I think buildInfo should NOT require auth and that this bug should be re-opened.

Generated at Thu Feb 08 03:04:12 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.