<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 04:35:14 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-33993] (kerberos) failed to connect if the principle name has &apos;@&apos; character</title>
                <link>https://jira.mongodb.org/browse/SERVER-33993</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;hi &lt;br/&gt;
I made following test:&lt;br/&gt;
firstly, I added user1@a@KER.COM into KDC, see&lt;br/&gt;
&lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/attachment/182124/182124_add_to_kdc.png&quot; width=&quot;100%&quot; style=&quot;border: 0px solid black&quot; /&gt;&lt;/span&gt;&lt;/p&gt;

&lt;p&gt; (note: for escape purpose, we have to add a back-slash before @ if the principle name has @)&lt;br/&gt;
and then I added the user &quot;user1@a@KER.COM&quot; into mongodb server. see   &lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/attachment/182123/182123_addUser.png&quot; width=&quot;100%&quot; style=&quot;border: 0px solid black&quot; /&gt;&lt;/span&gt;  &lt;br/&gt;
then try to connect from mongo shell&lt;br/&gt;
&lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/attachment/182122/182122_log_shell.png&quot; width=&quot;100%&quot; style=&quot;border: 0px solid black&quot; /&gt;&lt;/span&gt; &lt;br/&gt;
I can&apos;t login successfully from mongo shell&lt;/p&gt;</description>
                <environment></environment>
        <key id="513684">SERVER-33993</key>
            <summary>(kerberos) failed to connect if the principle name has &apos;@&apos; character</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="3">Duplicate</resolution>
                                        <assignee username="ben.caimano@mongodb.com">Benjamin Caimano</assignee>
                                    <reporter username="winnie_quest">winnie_quest</reporter>
                        <labels>
                    </labels>
                <created>Tue, 20 Mar 2018 01:16:46 +0000</created>
                <updated>Tue, 27 Nov 2018 16:20:49 +0000</updated>
                            <resolved>Tue, 27 Nov 2018 16:20:25 +0000</resolved>
                                                                    <component>Security</component>
                                        <votes>1</votes>
                                    <watches>9</watches>
                                                                                                                <comments>
                            <comment id="2072864" author="greg.mckeon" created="Tue, 27 Nov 2018 16:20:25 +0000"  >&lt;p&gt;Closing as a duplicate, since there were two tasks that came out of this that were both filed as separate tickets.&lt;/p&gt;</comment>
                            <comment id="1878152" author="jesse" created="Mon, 30 Apr 2018 18:04:37 +0000"  >&lt;p&gt;Yes, we&apos;re tracking that in&#160;&lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-2549&quot; title=&quot;(kerberos) failed to connect if the principle name has &amp;#39;@&amp;#39; character&quot; class=&quot;issue-link&quot; data-issue-key=&quot;CDRIVER-2549&quot;&gt;&lt;del&gt;CDRIVER-2549&lt;/del&gt;&lt;/a&gt;.&lt;/p&gt;</comment>
                            <comment id="1878142" author="acm" created="Mon, 30 Apr 2018 17:55:48 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=winnie_quest&quot; class=&quot;user-hover&quot; rel=&quot;winnie_quest&quot;&gt;winnie_quest&lt;/a&gt;&#160;- Just an FYI, but the C++ driver wraps the C driver and delegates all URI interpretation to the C driver. If there is an issue, I recommend opening a ticket in the CDRIVER project:&#160;&lt;a href=&quot;https://jira.mongodb.org/projects/CDRIVER&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;https://jira.mongodb.org/projects/CDRIVER&lt;/a&gt;.&lt;/p&gt;</comment>
                            <comment id="1876817" author="winnie_quest" created="Sat, 28 Apr 2018 01:17:51 +0000"  >&lt;p&gt;hi Ben,&lt;/p&gt;

&lt;p&gt;I have tried with :&lt;/p&gt;
&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;auto client = mongocxx::client{ mongocxx::uri{ &lt;/span&gt;&lt;span style=&quot;color: blue; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;&quot;mongodb://user1%5C%5C%40a%40TICQUEST.CLOUDAPP.NET:123@db-mongo-kerberos.cloudapp.net:27017/?authMechanism=GSSAPI&amp;amp;authMechanismProperties=SERVICE_NAME:mongodb&quot;&lt;/span&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt; } };&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;

&lt;p&gt;but it still doesn&apos;t work.&lt;br/&gt;
so I think it looks like it&apos;s CXX driver&apos;s issue.&lt;br/&gt;
Thank you so much for your help&lt;/p&gt;</comment>
                            <comment id="1876381" author="ben.caimano" created="Fri, 27 Apr 2018 17:10:46 +0000"  >&lt;p&gt;Hmmmmmm, so I&apos;m not a CXX driver expert by any means. (The shell falls to one team and the cxx to another.)&lt;/p&gt;

&lt;p&gt;I am curious if perhaps the driver escapes the html and then escapes special characters. Does it work with this:&lt;/p&gt;

&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;auto client = mongocxx::client{ mongocxx::uri{ &quot;mongodb://user1%5C%5C%40a%40TICQUEST.CLOUDAPP.NET:123@db-mongo-kerberos.cloudapp.net:27017/?authMechanism=GSSAPI&amp;amp;authMechanismProperties=SERVICE_NAME:mongodb&quot; } };&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;

&lt;p&gt;Any verbose output would be appreciated.&lt;/p&gt;

&lt;p&gt;(Also, apologies if I&apos;m taking us down the wrong path, &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=jesse&quot; class=&quot;user-hover&quot; rel=&quot;jesse&quot;&gt;jesse&lt;/a&gt;.)&lt;/p&gt;</comment>
                            <comment id="1875853" author="winnie_quest" created="Fri, 27 Apr 2018 07:34:13 +0000"  >&lt;p&gt;hi Ben,&lt;br/&gt;
    thank you so much for your detailed explanation, it makes sense to me. so could I make a conclusion for the solution?&lt;br/&gt;
for kerberos authentication, if we want to use username called &apos;user1&lt;font color=&quot;red&quot;&gt;@&lt;/font&gt;a@TICQUEST.CLOUDAPP.NET&apos; ,  we should add the user to kdc server firstly, like this:&lt;br/&gt;
 &lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;a id=&quot;182124_thumb&quot; href=&quot;https://jira.mongodb.org/secure/attachment/182124/182124_add_to_kdc.png&quot; title=&quot;add_to_kdc.png&quot; file-preview-type=&quot;image&quot; file-preview-id=&quot;182124&quot; file-preview-title=&quot;add_to_kdc.png&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/thumbnail/182124/_thumb_182124.png&quot; style=&quot;border: 0px solid black&quot; role=&quot;presentation&quot;/&gt;&lt;/a&gt;&lt;/span&gt; ,&lt;br/&gt;
then we should add the username with a backslash before at-sign into mongoDB, like this: &lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;a id=&quot;184791_thumb&quot; href=&quot;https://jira.mongodb.org/secure/attachment/184791/184791_add_user.png&quot; title=&quot;add_user.png&quot; file-preview-type=&quot;image&quot; file-preview-id=&quot;184791&quot; file-preview-title=&quot;add_user.png&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/thumbnail/184791/_thumb_184791.png&quot; style=&quot;border: 0px solid black&quot; role=&quot;presentation&quot;/&gt;&lt;/a&gt;&lt;/span&gt; ,&lt;br/&gt;
when connect from mongo shell, I should add double back-slash before at-sign, like this:&lt;br/&gt;
 &lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;a id=&quot;184792_thumb&quot; href=&quot;https://jira.mongodb.org/secure/attachment/184792/184792_connect.png&quot; title=&quot;connect.png&quot; file-preview-type=&quot;image&quot; file-preview-id=&quot;184792&quot; file-preview-title=&quot;connect.png&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/thumbnail/184792/_thumb_184792.png&quot; style=&quot;border: 0px solid black&quot; role=&quot;presentation&quot;/&gt;&lt;/a&gt;&lt;/span&gt; &lt;/p&gt;

&lt;p&gt;Am I correct?&lt;/p&gt;

&lt;p&gt;if so, I found I tried to connect by mongodb CXX driver, like this:&lt;br/&gt;
auto client = mongocxx::client{ mongocxx::uri{ &quot;mongodb://user1%&lt;font color=&quot;red&quot;&gt;5C%40&lt;/font&gt;a%40TICQUEST.CLOUDAPP.NET:123@db-mongo-kerberos.cloudapp.net:27017/?authMechanism=GSSAPI&amp;amp;authMechanismProperties=SERVICE_NAME:mongodb&quot; } }; &lt;br/&gt;
(note: %5C is the percent-encoding of back-slash, %40 is percent-encoding of at-sign), &lt;/p&gt;

&lt;p&gt;connection would get failed.&lt;br/&gt;
that means with &quot;user1&amp;#92;@a@TICQUEST.CLOUDAPP.NET&quot; I still can&apos;t connect to server by mongocxx driver in my program, should I open a ticket to the driver module?&lt;br/&gt;
hi @A. Jesse Jiryu Davis, could you please help to confirm as well?&lt;/p&gt;




</comment>
                            <comment id="1873340" author="ben.caimano" created="Tue, 24 Apr 2018 22:37:42 +0000"  >&lt;p&gt;Hey &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=winnie_quest&quot; class=&quot;user-hover&quot; rel=&quot;winnie_quest&quot;&gt;winnie_quest&lt;/a&gt;,&lt;/p&gt;

&lt;p&gt;So the &lt;b&gt;mongod&lt;/b&gt; server stores usernames in pure bytes. When you add a user via the &lt;b&gt;mongo&lt;/b&gt; shell, it uses javascript to interpret your string which means that to get a backslash into a username you need to escape that slash. The reason the kdc server rejects a principal that has multiple at-signs in it is due to the internal special character rules of kerberos. It needs that backslash in the byte string to escape all at-signs that are in the principal name portion.&lt;/p&gt;

&lt;p&gt;Going a little deeper, to connect a mongodb user to a kerberos principal, the mongodb user needs to reflect the &quot;canonical&quot; name of the principal. Specifically for MIT kerberos, that means that all at-signs that aren&apos;t the one that separates name and domain must be escaped by a backslash. I say specifically for MIT kerberos because &lt;a href=&quot;https://tools.ietf.org/html/rfc2743.html&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;the standard is very unhelpful&lt;/a&gt; (see section 4.2 for how they leave this up to the OS and thus the implementation).&lt;/p&gt;

&lt;p&gt;When you use the &lt;b&gt;mongo&lt;/b&gt; shell to connect to the &lt;b&gt;mongod&lt;/b&gt; server via gss-api/libkrb5, the shell uses your ticket from kinit. The ticket you use in the images above to authenticate is using a principal that does have the backslash, the escape character. You then send the string from the --username argument as the user you want to be in the &lt;b&gt;mongod&lt;/b&gt; server. There are two issues here:&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;A database user must bytewise match, including escape characters, the principal from your ticket. We can&apos;t auth a user with multiple unescaped at-signs in its username because we can&apos;t predict how the specific kerberos implementation will escape the principal.&lt;/li&gt;
	&lt;li&gt;The username used by any one of our clients (the shell included) must match a user document stored in the database. If the client presents a username without necessary escape characters, it can only match user documents for which kerberos cannot issue tickets.&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;Apologies if I seem to be restating things you know, I&apos;m trying to make sure we&apos;re on the same page here. This isn&apos;t something we can really fix--we don&apos;t control and cannot predict what the rules are for how characters are escaped. In general, we&apos;d recommend you look at the naming rules for your specific GSS-API implementation and make sure your usernames conform to them.&lt;/p&gt;

&lt;p&gt;P.S. If you&apos;re curious about how kerberos does its escaping, you can see how it works &lt;a href=&quot;https://github.com/krb5/krb5/blob/6afa8b4abf8f7c5774d03e6b15ee7288ad68d725/src/lib/krb5/krb/parse.c#L156&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;here&lt;/a&gt;. You can also see how it prints out principles &lt;a href=&quot;https://github.com/krb5/krb5/blob/master/src/lib/krb5/krb/unparse.c#L46&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;here&lt;/a&gt;. I&apos;ve specifically linked the lines where it deals with escape characters. Importantly, the &quot;krb5_parse_name&quot; function is used just about anywhere a principle is considered, including login. This means that the byte representation passed to kerberos must include escape characters. &lt;/p&gt;</comment>
                            <comment id="1872224" author="winnie_quest" created="Tue, 24 Apr 2018 05:22:27 +0000"  >&lt;p&gt;hi Ben,&lt;br/&gt;
    thanks for you reply, but I am still confused. From what your said, it looks like mongodb server uses javascript to read username info, but javascript doesn&apos;t converse at-sign to backslash+at-sign, and then send &quot;user1@a@KER.COM&quot; to kdc server to do query, and get &quot;not-found this user&quot; result. is my understanding correct?  If so, can mongodb server do such escape before sending the username to kdc server?&lt;/p&gt;

&lt;p&gt;    According to your suggestion, I had a test, if I added a user like this:&lt;br/&gt;
 &lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;a id=&quot;184791_thumb&quot; href=&quot;https://jira.mongodb.org/secure/attachment/184791/184791_add_user.png&quot; title=&quot;add_user.png&quot; file-preview-type=&quot;image&quot; file-preview-id=&quot;184791&quot; file-preview-title=&quot;add_user.png&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/thumbnail/184791/_thumb_184791.png&quot; style=&quot;border: 0px solid black&quot; role=&quot;presentation&quot;/&gt;&lt;/a&gt;&lt;/span&gt; &lt;br/&gt;
   but I can only connect successfully with the following username&lt;br/&gt;
 &lt;span class=&quot;image-wrap&quot; style=&quot;&quot;&gt;&lt;a id=&quot;184792_thumb&quot; href=&quot;https://jira.mongodb.org/secure/attachment/184792/184792_connect.png&quot; title=&quot;connect.png&quot; file-preview-type=&quot;image&quot; file-preview-id=&quot;184792&quot; file-preview-title=&quot;connect.png&quot;&gt;&lt;img src=&quot;https://jira.mongodb.org/secure/thumbnail/184792/_thumb_184792.png&quot; style=&quot;border: 0px solid black&quot; role=&quot;presentation&quot;/&gt;&lt;/a&gt;&lt;/span&gt; &lt;br/&gt;
   I think it&apos;s strange for the client to put two backslash signs before &apos;@&apos;.&lt;/p&gt;

&lt;p&gt;   Well, I created this JIRA item because of &lt;a href=&quot;https://jira.mongodb.org/browse/CDRIVER-2549&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;https://jira.mongodb.org/browse/CDRIVER-2549&lt;/a&gt;, in my program, I was trying to connect to mongo db server  with mongodb cxx driver, but I couldn&apos;t connect to it with  &quot;user@a@KER.COM&quot;, this issue was found by our QA, I just want to report this issue to mongDB.&lt;br/&gt;
    this issue is not urgent, but I just want to know if you can solve it.&lt;/p&gt;</comment>
                            <comment id="1868282" author="ben.caimano" created="Wed, 18 Apr 2018 22:40:51 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=winnie_quest&quot; class=&quot;user-hover&quot; rel=&quot;winnie_quest&quot;&gt;winnie_quest&lt;/a&gt;,&lt;/p&gt;

&lt;p&gt;This appears to be a frustrating result of how javascript--and thus the Mongo Shell officially handle strings. Kerberos actually stores the backslash as a raw character for the principal. However, javascript string parsing resolves an at-sign input string as an at-sign raw string without a backslash. (The process of escaping a string for our shell is less than obvious.)&lt;/p&gt;

&lt;p&gt;Would you mind trying to add your test user like so:&lt;/p&gt;
&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;&amp;gt; use $external&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;&amp;gt; db.createUser({&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;  user: String.raw`user1\@a@KER.COM`,&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;  roles: [&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;    { role: &lt;/span&gt;&lt;span style=&quot;color: blue; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;&quot;userAdminAnyDatabase&quot;&lt;/span&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;, db: &lt;/span&gt;&lt;span style=&quot;color: blue; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;&quot;admin&quot;&lt;/span&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt; },&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;    { role: &lt;/span&gt;&lt;span style=&quot;color: blue; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;&quot;readWrite&quot;&lt;/span&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;, db: &lt;/span&gt;&lt;span style=&quot;color: blue; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;&quot;quest_stage&quot;&lt;/span&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt; }&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;  ]&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;})&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="583433">SERVER-36456</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                        <issuelink>
            <issuekey id="511677">CDRIVER-2549</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                            <attachment id="182123" name="addUser.png" size="31252" author="winnie_quest" created="Tue, 20 Mar 2018 01:16:07 +0000"/>
                            <attachment id="182124" name="add_to_kdc.png" size="58404" author="winnie_quest" created="Tue, 20 Mar 2018 01:15:31 +0000"/>
                            <attachment id="184791" name="add_user.png" size="10155" author="winnie_quest" created="Tue, 24 Apr 2018 04:35:11 +0000"/>
                            <attachment id="184792" name="connect.png" size="23506" author="winnie_quest" created="Tue, 24 Apr 2018 04:42:23 +0000"/>
                            <attachment id="182122" name="log_shell.png" size="40450" author="winnie_quest" created="Tue, 20 Mar 2018 01:16:34 +0000"/>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18555" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname># of Sprints</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>5.0</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Mon, 16 Apr 2018 19:22:04 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        5 years, 11 weeks, 1 day ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>greg.mckeon@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            5 years, 11 weeks, 1 day ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                    <customfield id="customfield_10032" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Operating System</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10026"><![CDATA[ALL]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>jesse@mongodb.com</customfieldvalue>
            <customfieldvalue>andrew.morrow@mongodb.com</customfieldvalue>
            <customfieldvalue>ben.caimano@mongodb.com</customfieldvalue>
            <customfieldvalue>greg.mckeon@mongodb.com</customfieldvalue>
            <customfieldvalue>winnie_quest</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|htt26v:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|htystj:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_23361" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Requested By</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_10557" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="2555">Service Arch 2018-10-08</customfieldvalue>
    <customfieldvalue id="2583">Service Arch 2018-10-22</customfieldvalue>
    <customfieldvalue id="2601">Service Arch 2018-11-05</customfieldvalue>
    <customfieldvalue id="2602">Service Arch 2018-11-19</customfieldvalue>
    <customfieldvalue id="2635">Service Arch 2018-12-03</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|htsoe7:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>