SERVER-37833 Retry internal auth with alternate key during keyfile rollover

1 files changed, 10 insertions, 0 deletions

diff --git a/src/mongo/db/startup_warnings_common.cpp b/src/mongo/db/startup_warnings_common.cpp
index 98712cfb5c8..938c66f1320 100644
--- a/src/mongo/db/startup_warnings_common.cpp
+++ b/src/mongo/db/startup_warnings_common.cpp
@@ -38,6 +38,7 @@
 #include <fstream>
 
 #include "mongo/config.h"
+#include "mongo/db/auth/internal_user_auth.h"
 #include "mongo/db/server_options.h"
 #include "mongo/util/log.h"
 #include "mongo/util/net/ssl_options.h"
@@ -136,6 +137,15 @@ void logCommonStartupWarnings(const ServerGlobalParams& serverParams) {
         warned = true;
     }
 
+    if (!getInternalUserAuthParams(1).isEmpty()) {
+        log() << startupWarningsLog;
+        log() << "** WARNING: Multiple keys specified in security key file. If cluster key file"
+              << startupWarningsLog;
+        log() << "            rollover is not in progress, only one key should be specified in"
+              << startupWarningsLog;
+        log() << "            the key file" << startupWarningsLog;
+        warned = true;
+    }
 
     if (warned) {
         log() << startupWarningsLog;