Currently, the GSSAPI service name for a mongo server is hardcoded to mongodb, and the hostname for authentication purposes is found by calling getHostName(). This requires customers to have a working DNS setup, and to not use CNAMEs to identify mongo nodes to clients.
A solution that allows customers to use CNAMEs is to allow system admins to optionally override at startup the hostname used by the server for purposes of sasl authentication.
- is depended on by
-
JAVA-845 Ability to use different SPN on the driver for Kerberos Authentication
- Closed
-
DRIVERS-1889 Ability to use different Service Name on the driver for Kerberos Authentication
- Closed
- is duplicated by
-
SERVER-8325 Let administrator override sasl service name and host name used by server for GSSAPI authentication.
- Closed
- related to
-
SERVER-11770 Sasl Service Name cannot be specified for the shell or tools
- Closed