summaryrefslogtreecommitdiff
path: root/jstests/auth/arbiter.js
blob: 24d5ebd58f7fc1f2f16720b469ce49b01b653016 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
// Certain commands should be run-able from arbiters under localhost, but not from
// any other nodes in the replset.
// SERVER-48314: Disabled for ephemeralForTest due to lacking timestamp support
// @tags: [requires_replication, incompatible_with_eft]

(function() {

const name = "arbiter_localhost_test";
const key = "jstests/libs/key1";
const replTest = new ReplSetTest({name: name, nodes: 2, keyFile: key});
const nodes = replTest.nodeList();

replTest.startSet();
replTest.initiate({
    _id: name,
    members: [{"_id": 0, "host": nodes[0]}, {"_id": 1, "host": nodes[1], arbiterOnly: true}],
});

const primary = replTest.nodes[0];
const arbiter = replTest.nodes[1];

const testCases = [
    {
        command: {getCmdLineOpts: 1},
        expectedPrimaryCode: ErrorCodes.Unauthorized,
        expectedArbiterCode: ErrorCodes.OK,
    },
    {
        command: {getParameter: 1, logLevel: 1},
        expectedPrimaryCode: ErrorCodes.Unauthorized,
        expectedArbiterCode: ErrorCodes.OK,
    },
    {
        command: {serverStatus: 1},
        expectedPrimaryCode: ErrorCodes.Unauthorized,
        expectedArbiterCode: ErrorCodes.OK,
    },
    {
        command: {
            ping: 1,
            "$clusterTime": {
                clusterTime: Timestamp(1, 1),
                signature: {hash: BinData(0, "AAAAAAAAAAAAAAAAAAAAAAAAAAA="), keyId: NumberLong(0)}
            }
        },
        expectedPrimaryCode: ErrorCodes.OK,
        expectedArbiterCode: ErrorCodes.OK,
    },
    {
        command: {
            hello: 1,
            "$clusterTime": {
                clusterTime: Timestamp(1, 1),
                signature: {hash: BinData(0, "AAAAAAAAAAAAAAAAAAAAAAAAAAA="), keyId: NumberLong(0)}
            }
        },
        expectedPrimaryCode: ErrorCodes.OK,
        expectedArbiterCode: ErrorCodes.OK,
    },
];

function _runTestCommandOnConn(conn, command, expectedCode) {
    if (expectedCode) {
        assert.commandFailedWithCode(conn.adminCommand(command), expectedCode);
    } else {
        assert.commandWorked(conn.adminCommand(command));
    }
}

for (var testCase of testCases) {
    _runTestCommandOnConn(primary, testCase.command, testCase.expectedPrimaryCode);
    _runTestCommandOnConn(arbiter, testCase.command, testCase.expectedArbiterCode);
}

replTest.stopSet();
})();