1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
// Test that initial sync aborts when it encounters auth data from unsupported
// auth schemas (see: SERVER-17671)
function checkedReInitiate(rst) {
try {
rst.reInitiate();
}
catch (e) {
// reInitiate can throw because it tries to run an ismaster command on
// all secondaries, including the new one that may have already aborted
var errMsg = tojson(e);
if (errMsg.indexOf('error doing query: failed') > -1 ||
errMsg.indexOf('socket exception') > -1) {
// Ignore these exceptions, which are indicative of an aborted node
} else {
throw e;
}
}
}
function testInitialSyncAbortsWithUnsupportedAuthSchema(schema) {
'use strict';
// Create a replica set with one data-bearing node and one arbiter to
// ensure availability when the added node fasserts later in the test
var rst = new ReplSetTest({nodes: {n0: {}, arbiter: {}}});
rst.startSet();
rst.initiate();
// Simulate unsupported auth data by setting the auth schema version to an
// invalid or outdated version
var versionColl = rst.getPrimary().getDB('admin').system.version;
var res = versionColl.insert(schema);
assert.writeOK(res);
// Add another node to the replica set to allow an initial sync to occur
rst.add();
clearRawMongoProgramOutput();
checkedReInitiate(rst);
var msg;
if (schema.hasOwnProperty('currentVersion')) {
msg = new RegExp('During initial sync, found auth schema version ' + schema.currentVersion);
} else {
msg = /During initial sync, found malformed auth schema version/;
}
var assertFn = function() {
return rawMongoProgramOutput().match(msg);
};
assert.soon(assertFn, 'Initial sync should have aborted due to an invalid or unsupported' +
' authSchema version: ' + tojson(schema), 60000);
rst.stopSet(undefined, undefined, { allowedExitCodes: [ MongoRunner.EXIT_ABRUPT ] });
}
function testInitialSyncAbortsWithExistingUserAndNoAuthSchema() {
'use strict';
// Create a replica set with one data-bearing node and one arbiter to
// ensure availability when the added node fasserts later in the test
var rst = new ReplSetTest({nodes: {n0: {}, arbiter: {}}});
rst.startSet();
rst.initiate();
// Simulate unsupported auth data by inserting a user document without inserting
// a corresponding auth schema
var userColl = rst.getPrimary().getDB('admin').system.users;
var res = userColl.insert({});
assert.writeOK(res);
// Add another node to the replica set to allow an initial sync to occur
rst.add();
clearRawMongoProgramOutput();
checkedReInitiate(rst);
var msg = /During initial sync, found documents in admin\.system\.users/;
var assertFn = function() {
return rawMongoProgramOutput().match(msg);
};
assert.soon(assertFn, 'Initial sync should have aborted due to an existing user document and' +
' a missing auth schema', 60000);
rst.stopSet(undefined, undefined, { allowedExitCodes: [ MongoRunner.EXIT_ABRUPT ] });
}
testInitialSyncAbortsWithUnsupportedAuthSchema({_id: 'authSchema'});
testInitialSyncAbortsWithUnsupportedAuthSchema({_id: 'authSchema', currentVersion: 1});
testInitialSyncAbortsWithUnsupportedAuthSchema({_id: 'authSchema', currentVersion: 2});
testInitialSyncAbortsWithExistingUserAndNoAuthSchema();
|
