<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 08:35:39 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[GODRIVER-1090] Authentication fails against Hidden Secondary </title>
                <link>https://jira.mongodb.org/browse/GODRIVER-1090</link>
                <project id="14289" key="GODRIVER">Go Driver</project>
                    <description>&lt;p&gt;Steps to Reproduce:&lt;/p&gt;
&lt;ol&gt;
	&lt;li&gt;Set up a four member replica set with SCRAM-SHA auth enabled AND the &lt;a href=&quot;https://docs.mongodb.com/manual/core/security-users/#localhost-exception&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;localhost exception&lt;/a&gt; disabled:&lt;/li&gt;
&lt;/ol&gt;
&lt;ul&gt;
	&lt;li&gt;Primary&lt;/li&gt;
	&lt;li&gt;Secondary&lt;/li&gt;
	&lt;li&gt;Secondary&lt;/li&gt;
	&lt;li&gt;Secondary
	&lt;ul&gt;
		&lt;li&gt;Hidden: true&lt;/li&gt;
		&lt;li&gt;Priority: 0&lt;/li&gt;
	&lt;/ul&gt;
	&lt;/li&gt;
&lt;/ul&gt;
&lt;ol&gt;
	&lt;li&gt;Set up a user with the &quot;clusterMonitor&quot; role on admin&lt;/li&gt;
	&lt;li&gt;Create a NewClient connection with basic clientOptions, authenticating with that user against admin&lt;/li&gt;
	&lt;li&gt;Connect the new client (Note that if at this stage you call connectionStatus you&apos;ll get back empty users and roles - this seems like a separate case from &lt;a href=&quot;https://jira.mongodb.org/browse/GODRIVER-1033&quot; title=&quot;Authenticated connection does not have permissions to execute replSetGetStatus&quot; class=&quot;issue-link&quot; data-issue-key=&quot;GODRIVER-1033&quot;&gt;&lt;del&gt;GODRIVER-1033&lt;/del&gt;&lt;/a&gt; the connectionStatus result is the same)&lt;/li&gt;
	&lt;li&gt;Get the admin database&lt;/li&gt;
	&lt;li&gt;Use RunCommand to try to call replSetGetStatus&lt;/li&gt;
&lt;/ol&gt;


&lt;p&gt;Expected:&lt;br/&gt;
replSetGetStatus executes properly&lt;br/&gt;
Observed:&lt;br/&gt;
replSetGetStatus receives an authorization error&lt;/p&gt;</description>
                <environment></environment>
        <key id="778522">GODRIVER-1090</key>
            <summary>Authentication fails against Hidden Secondary </summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="2" iconUrl="https://jira.mongodb.org/images/icons/priorities/critical.svg">Critical - P2</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13202">Works as Designed</resolution>
                                        <assignee username="-1">Unassigned</assignee>
                                    <reporter username="jonathan.balsano@mongodb.com">Jonathan Balsano</reporter>
                        <labels>
                    </labels>
                <created>Tue, 28 May 2019 12:17:46 +0000</created>
                <updated>Fri, 27 Oct 2023 13:16:33 +0000</updated>
                            <resolved>Tue, 28 May 2019 22:12:06 +0000</resolved>
                                                                    <component>Authentication</component>
                                        <votes>0</votes>
                                    <watches>6</watches>
                                                                                                                <comments>
                            <comment id="2262766" author="jonathan.balsano" created="Tue, 28 May 2019 22:12:06 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=kris.brandow&quot; class=&quot;user-hover&quot; rel=&quot;kris.brandow&quot;&gt;kris.brandow&lt;/a&gt; explained to me today that this is expected behavior - the MongoDB Go Driver adheres to the drivers spec and does not successfully authenticate to nodes not in the following list:&lt;br/&gt;
1. Primaries&lt;br/&gt;
2. Secondaries&lt;br/&gt;
3. Standalones&lt;br/&gt;
4. Mongos&lt;/p&gt;</comment>
                            <comment id="2261913" author="jonathan.balsano" created="Tue, 28 May 2019 15:14:38 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=jeff.yemin&quot; class=&quot;user-hover&quot; rel=&quot;jeff.yemin&quot;&gt;jeff.yemin&lt;/a&gt; I&apos;m using the same setup as in &lt;a href=&quot;https://jira.mongodb.org/browse/GODRIVER-1033&quot; title=&quot;Authenticated connection does not have permissions to execute replSetGetStatus&quot; class=&quot;issue-link&quot; data-issue-key=&quot;GODRIVER-1033&quot;&gt;&lt;del&gt;GODRIVER-1033&lt;/del&gt;&lt;/a&gt;, so read preference nearest, direct connection, client options exactly as in &lt;a href=&quot;https://jira.mongodb.org/browse/GODRIVER-1033&quot; title=&quot;Authenticated connection does not have permissions to execute replSetGetStatus&quot; class=&quot;issue-link&quot; data-issue-key=&quot;GODRIVER-1033&quot;&gt;&lt;del&gt;GODRIVER-1033&lt;/del&gt;&lt;/a&gt;. (The script I&apos;m using has the same initialization block.) I&apos;m not specifying a separate read preference for RunCommand.&lt;/p&gt;</comment>
                            <comment id="2261725" author="jeff.yemin" created="Tue, 28 May 2019 13:30:46 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=jonathan.balsano&quot; class=&quot;user-hover&quot; rel=&quot;jonathan.balsano&quot;&gt;jonathan.balsano&lt;/a&gt;, a few questions:&lt;/p&gt;

&lt;ol&gt;
	&lt;li&gt;What does the connection string look like for the NewClient? Or if you&apos;re not using a connection string how did you configure client options?&lt;/li&gt;
	&lt;li&gt;What read preference are you specifying for RunCommand, if any?&lt;/li&gt;
&lt;/ol&gt;
</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                                                <inwardlinks description="is depended on by">
                                                        </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10010">
                    <name>Duplicate</name>
                                                                <inwardlinks description="is duplicated by">
                                        <issuelink>
            <issuekey id="763515">GODRIVER-1033</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                                                <inwardlinks description="is related to">
                                        <issuelink>
            <issuekey id="971102">GODRIVER-1344</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                            <attachment id="218192" name="second.go" size="2108" author="jonathan.balsano@mongodb.com" created="Tue, 28 May 2019 17:52:58 +0000"/>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|huqjdr:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>