[SERVER-61038] Invalidate __system sessions after runtime changes to clusterIpSourceAllowlist Created: 27/Oct/21  Updated: 29/Oct/23  Resolved: 17/Nov/21

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 5.2.0

Type: Improvement Priority: Major - P3
Reporter: Sergey Galtsev (Inactive) Assignee: Sergey Galtsev (Inactive)
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Gantt Dependency
has to be done before SERVER-61535 Redesign user invalidation code Closed
has to be done after SERVER-45717 Allow changes to security.clusterIpSo... Closed
Related
Backwards Compatibility: Fully Compatible
Sprint: Security 2021-11-15, Security 2021-11-29
Participants:

 Description   

In SERVER-45717 a new feature was introduced, which allowed modifying security.clusterIpSourceAllowlist without a restart. In order to contain the size of change, we decided to not implement invalidation of existing sessions in the same patch, but rather handle it separately.



 Comments   
Comment by Githook User [ 16/Nov/21 ]

Author:

{'name': 'sergey.galtsev', 'email': 'sergey.galtsev@mongodb.com', 'username': 'brushless-glitch'}

Message: SERVER-61038 invalidate system user after runtime change to clusterIpSourceAllowlist
Branch: master
https://github.com/mongodb/mongo/commit/62092ca7d64527bcdd5514bc6da452b2aa363fd5

Generated at Thu Feb 08 05:51:23 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.