SERVER-10339 Changed OU in client.pem and changed failed x.509 auth msg

1 files changed, 4 insertions, 2 deletions

diff --git a/src/mongo/db/commands/authentication_commands.cpp b/src/mongo/db/commands/authentication_commands.cpp
index e4aba7c9c8d..1f511602458 100644
--- a/src/mongo/db/commands/authentication_commands.cpp
+++ b/src/mongo/db/commands/authentication_commands.cpp
@@ -270,8 +270,10 @@ namespace mongo {
             // Handle internal cluster member auth, only applies to server-server connections 
             if (srvClusterId == peerClusterId) {
                 if (cmdLine.clusterAuthMode.empty() || cmdLine.clusterAuthMode == "keyfile") {
-                    return Status(ErrorCodes::AuthenticationFailed,
-                                  "X509 authentication is not allowed for cluster authentication");
+                    return Status(ErrorCodes::AuthenticationFailed, "The provided certificate " 
+                                  "can only be used for cluster authentication, not client " 
+                                  "authentication. The current configuration does not allow " 
+                                  "x.509 cluster authentication, check the --clusterAuthMode flag");
                 }
                 authorizationSession->grantInternalAuthorization();
             }