summaryrefslogtreecommitdiff
path: root/src/mongo/db/mongod_options.cpp
diff options
context:
space:
mode:
authorMark Benvenuto <mark.benvenuto@mongodb.com>2021-06-16 10:41:25 -0400
committerEvergreen Agent <no-reply@evergreen.mongodb.com>2021-06-16 15:40:35 +0000
commitc73b1c09eb5ce2053577abac0a4ba360e3845de8 (patch)
tree90ebcc920053920129cd0c2d4e60d0ca4146f3a2 /src/mongo/db/mongod_options.cpp
parenta616859a60e6cbb40ab0b7ddbeed06e726bd40bc (diff)
downloadmongo-c73b1c09eb5ce2053577abac0a4ba360e3845de8.tar.gz
SERVER-55792 Verify credentials when clusterAuthMode is set via setParameter
Diffstat (limited to 'src/mongo/db/mongod_options.cpp')
-rw-r--r--src/mongo/db/mongod_options.cpp5
1 files changed, 3 insertions, 2 deletions
diff --git a/src/mongo/db/mongod_options.cpp b/src/mongo/db/mongod_options.cpp
index ee0bbd93040..881f83c1abc 100644
--- a/src/mongo/db/mongod_options.cpp
+++ b/src/mongo/db/mongod_options.cpp
@@ -41,6 +41,7 @@
#include "mongo/bson/json.h"
#include "mongo/bson/util/builder.h"
#include "mongo/config.h"
+#include "mongo/db/auth/cluster_auth_mode.h"
#include "mongo/db/cluster_auth_mode_option_gen.h"
#include "mongo/db/global_settings.h"
#include "mongo/db/keyfile_option_gen.h"
@@ -515,8 +516,8 @@ Status storeMongodOptions(const moe::Environment& params) {
if (!replSettings.getReplSetString().empty() &&
(params.count("security.authorization") &&
params["security.authorization"].as<std::string>() == "enabled") &&
- serverGlobalParams.clusterAuthMode.load() != ServerGlobalParams::ClusterAuthMode_x509 &&
- !params.count("security.keyFile")) {
+ !serverGlobalParams.startupClusterAuthMode.x509Only() &&
+ serverGlobalParams.keyFile.empty()) {
return Status(
ErrorCodes::BadValue,
str::stream()