-
Type: Bug
-
Resolution: Fixed
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
-
Fully Compatible
-
ALL
-
v4.4
-
Security 2020-10-05, Security 2020-12-28, Security 2021-01-25, Security 2021-02-08, Security 2021-02-22
-
35
If the server receives an auth request that uses saslStart and requires a saslContinue, but never runs saslContinue, then the server will count a received authentication, but not a successful one. There is at least one test that assumes this will never happen, and uses an equal number of received authentication attempts and successful authentication attempts as a metric for correctness. This/these test(s) should take this behavior into account.
Per sara.golemon:
> The right solution may be grabbing the auth stats right after rst.awaitSecondaryNodes(); and verify that speculative, cluster and total auths are all >= ($numberOfNodes - 1). Then trigger all host-connections to re-establish, and get mech stats, then make sure received and successful both went up (and by equal amounts).