1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
// Test that initial sync aborts when it encounters auth data from unsupported
// auth schemas (see: SERVER-17671)
function testInitialSyncAbortsWithUnsupportedAuthSchema(schema) {
'use strict';
load("jstests/replsets/rslib.js"); // For reInitiateWithoutThrowingOnAbortedMember
// Create a replica set with one data-bearing node and one arbiter to
// ensure availability when the added node fasserts later in the test
var rst = new ReplSetTest({nodes: {n0: {}, arbiter: {}}});
rst.startSet();
rst.initiate();
// Simulate unsupported auth data by setting the auth schema version to an
// invalid or outdated version
var versionColl = rst.getPrimary().getDB('admin').system.version;
var res = versionColl.insert(schema);
assert.writeOK(res);
// Add another node to the replica set to allow an initial sync to occur
var initSyncNode = rst.add({setParameter: 'numInitialSyncAttempts=1'});
var initSyncNodeAdminDB = initSyncNode.getDB("admin");
clearRawMongoProgramOutput();
reInitiateWithoutThrowingOnAbortedMember(rst);
assert.soon(function() {
try {
initSyncNodeAdminDB.runCommand({ping: 1});
} catch (e) {
return true;
}
return false;
}, "Node did not terminate due to unsupported auth schema during initial sync", 60 * 1000);
rst.stop(initSyncNode, undefined, {allowedExitCode: MongoRunner.EXIT_ABRUPT});
var msg;
if (schema.hasOwnProperty('currentVersion')) {
msg = new RegExp('During initial sync, found auth schema version ' + schema.currentVersion);
} else {
msg = /During initial sync, found malformed auth schema version/;
}
assert(rawMongoProgramOutput().match(msg),
'Initial sync should have aborted due to an invalid or unsupported' +
' authSchema version: ' + tojson(schema));
rst.stopSet();
}
function testInitialSyncAbortsWithExistingUserAndNoAuthSchema() {
'use strict';
// Create a replica set with one data-bearing node and one arbiter to
// ensure availability when the added node fasserts later in the test
var rst = new ReplSetTest({nodes: {n0: {}, arbiter: {}}});
rst.startSet();
rst.initiate();
// Simulate unsupported auth data by inserting a user document without inserting
// a corresponding auth schema
var userColl = rst.getPrimary().getDB('admin').system.users;
var res = userColl.insert({});
assert.writeOK(res);
// Add another node to the replica set to allow an initial sync to occur
var initSyncNode = rst.add({setParameter: 'numInitialSyncAttempts=1'});
var initSyncNodeAdminDB = initSyncNode.getDB("admin");
clearRawMongoProgramOutput();
reInitiateWithoutThrowingOnAbortedMember(rst);
assert.soon(function() {
try {
initSyncNodeAdminDB.runCommand({ping: 1});
} catch (e) {
return true;
}
return false;
}, "Node did not terminate due to unsupported auth schema during initial sync", 60 * 1000);
rst.stop(initSyncNode, undefined, {allowedExitCode: MongoRunner.EXIT_ABRUPT});
var msg = /During initial sync, found documents in admin\.system\.users/;
assert(rawMongoProgramOutput().match(msg),
'Initial sync should have aborted due to an existing user document and' +
' a missing auth schema');
rst.stopSet();
}
testInitialSyncAbortsWithUnsupportedAuthSchema({_id: 'authSchema'});
testInitialSyncAbortsWithUnsupportedAuthSchema({_id: 'authSchema', currentVersion: 1});
testInitialSyncAbortsWithUnsupportedAuthSchema({_id: 'authSchema', currentVersion: 2});
testInitialSyncAbortsWithExistingUserAndNoAuthSchema();
|
