<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 07:43:28 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[DOCS-2445] Provide sample LDAP, MongoDB user/role mapping sync script</title>
                <link>https://jira.mongodb.org/browse/DOCS-2445</link>
                <project id="10380" key="DOCS">Documentation</project>
                    <description>&lt;p&gt;MongoDB 2.6 will integrate LDAP authentication, allowing users to authenticate in MongoDB through a call to LDAP.  MongoDB 2.6, however, will not automate syncing of MongoDB user and role mappings between MongoDB and LDAP; customers will still have to manually update user credentials within MongoDB.&lt;/p&gt;

&lt;p&gt;To simplify this, MongoDB will provide a sample script that will allow users to synch changes made to LDAP user and role mappings with their corresponding definitions in MongoDB.   The script will be provided to work with a simple LDAP hierarchy that defines a MongoDB group and underlying users:&lt;/p&gt;

&lt;p&gt;LDAP Organization - acme&lt;br/&gt;
LDAP MongoDB Group - MongoDB_dbAdminAnyDatabase&lt;br/&gt;
LDAP MongoDB User - Bob Jones&lt;/p&gt;

&lt;p&gt;Users can then customize to meet their specific LDAP structures or requirements.&lt;/p&gt;

&lt;p&gt;Functional requirements and proposed test plan is here:&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://docs.google.com/a/10gen.com/document/d/1s64LFwniLKMUlL_xs2Z1xOvIfVVD7fYEaYyPwaz_h8Y/edit?usp=sharing&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://docs.google.com/a/10gen.com/document/d/1s64LFwniLKMUlL_xs2Z1xOvIfVVD7fYEaYyPwaz_h8Y/edit?usp=sharing&lt;/a&gt;&lt;/p&gt;
</description>
                <environment></environment>
        <key id="86514">DOCS-2445</key>
            <summary>Provide sample LDAP, MongoDB user/role mapping sync script</summary>
                <type id="3" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14718&amp;avatarType=issuetype">Task</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="2">Won&apos;t Fix</resolution>
                                        <assignee username="david.hows">David Hows</assignee>
                                    <reporter username="rob.young@10gen.com">Rob Young</reporter>
                        <labels>
                    </labels>
                <created>Mon, 19 Aug 2013 17:22:51 +0000</created>
                <updated>Mon, 2 Feb 2015 18:25:59 +0000</updated>
                            <resolved>Tue, 23 Sep 2014 19:38:30 +0000</resolved>
                                                    <fixVersion>mongodb-2.6</fixVersion>
                                    <component>manual</component>
                        <due></due>
                            <votes>0</votes>
                                    <watches>11</watches>
                                                                                                                <comments>
                            <comment id="460484" author="rob.young@10gen.com" created="Fri, 22 Nov 2013 19:00:31 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=david.hows&quot; class=&quot;user-hover&quot; rel=&quot;david.hows&quot;&gt;david.hows&lt;/a&gt;, &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=barrie&quot; class=&quot;user-hover&quot; rel=&quot;barrie&quot;&gt;barrie&lt;/a&gt; Can you guys please coordinate on the required driver changes?  &lt;/p&gt;</comment>
                            <comment id="444954" author="david.hows" created="Tue, 22 Oct 2013 22:28:18 +0000"  >&lt;p&gt;Attached are an example of the hierarchy within LDAP that we suggest for making the synchronisation script.&lt;/p&gt;</comment>
                            <comment id="442224" author="rob.young@10gen.com" created="Thu, 17 Oct 2013 14:58:24 +0000"  >&lt;p&gt;The functional requirement is still open for discussion, but I think we need to make these assumptions:&lt;/p&gt;

&lt;ul class=&quot;alternate&quot; type=&quot;square&quot;&gt;
	&lt;li&gt;MongoDB roles (default or user-defined) must exist for the MongoDB instances using LDAP for authentication.  The script we provide will sync LDAP user/group or role mappings with MongoDB user/role mappings, but will not create new MongoDB roles or update MongoDB role level privilege mappings.  To do this, we would need to provide and maintain a defined LDAP schema for MongoDB, which is out of scope.&lt;/li&gt;
	&lt;li&gt;We need to brainstorm on if/how the script will add new MongoDB user/role mappings when needed.  As you note, this requires more MongoDB user specific data from LDAP and adds complexity to the script implementation.&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;I will set up call to discuss.&lt;/p&gt;
</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                            <outwardlinks description="depends on">
                                        <issuelink>
            <issuekey id="76547">RUBY-614</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10020">
                    <name>Gantt Dependency</name>
                                                                <inwardlinks description="has to be done after">
                                        <issuelink>
            <issuekey id="84020">DRIVERS-103</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="61519">RUBY-530</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="73810">SERVER-9530</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="105268">SERVER-12303</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                                        </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                            <attachment id="32878" name="david-ldap.ldif" size="2218" author="david.hows" created="Tue, 22 Oct 2013 22:27:10 +0000"/>
                            <attachment id="32879" name="ldap users.png" size="100676" author="david.hows" created="Tue, 22 Oct 2013 22:27:10 +0000"/>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>3.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Thu, 17 Oct 2013 06:49:07 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        10 years, 12 weeks, 5 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[<s><a href='https://jira.mongodb.org/browse/RUBY-614'>RUBY-614</a></s>]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>jess.mokrzecki@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            10 years, 12 weeks, 5 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>david.hows</customfieldvalue>
            <customfieldvalue>rob.young@10gen.com</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrrh3b:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hrscdz:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>79237</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hry6gn:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                </customfields>
    </item>
</channel>
</rss>