Loading...

XML

Word

Printable

JSON

Type: Improvement
Resolution: Done
Priority: Minor - P4
Fix Version/s: 2.4.0-rc1
Affects Version/s: None
Component/s: Security
Labels:
None

Backwards Compatibility:
Minor Change
Confidence Status:
None
Work Order:
3

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name:
None
Goal Link:
None

Currently, the GSSAPI service name for a mongo server is hardcoded to mongodb, and the hostname for authentication purposes is found by calling getHostName(). This requires customers to have a working DNS setup, and to not use CNAMEs to identify mongo nodes to clients.

A solution that allows customers to use CNAMEs is to allow system admins to optionally override at startup the hostname used by the server for purposes of sasl authentication.

is depended on by

JAVA-845 Ability to use different SPN on the driver for Kerberos Authentication

Closed

DRIVERS-1889 Ability to use different Service Name on the driver for Kerberos Authentication

Closed

is duplicated by

SERVER-8325 Let administrator override sasl service name and host name used by server for GSSAPI authentication.

Closed

related to

SERVER-11770 Sasl Service Name cannot be specified for the shell or tools

Closed

Assignee:: Andy Schwerin
Reporter:: Andy Schwerin
Participants:: Andy Schwerin
Votes:: 0 Vote for this issue
Watchers:: 5 Start watching this issue

Created:: Feb 08 2013 04:15:03 PM UTC
Updated:: Nov 18 2013 10:21:12 PM UTC
Resolved:: Feb 20 2013 10:39:14 PM UTC

Details

Description

Attachments

Issue Links

Activity

People

Dates