6745d91683
Makes all JS tests access the replica set member state from the class itself instead of the object instance. Also removes some unused code.
75 lines
2.1 KiB
JavaScript
75 lines
2.1 KiB
JavaScript
// Tests authentication with replica sets using key files.
|
|
//
|
|
// This test requires users to persist across a restart.
|
|
// @tags: [requires_persistence]
|
|
|
|
var testInvalidAuthStates = function() {
|
|
print("check that 0 is in recovering");
|
|
rs.waitForState(rs.nodes[0], ReplSetTest.State.RECOVERING);
|
|
|
|
print("shut down 1, 0 still in recovering.");
|
|
rs.stop(1);
|
|
sleep(5);
|
|
|
|
rs.waitForState(rs.nodes[0], ReplSetTest.State.RECOVERING);
|
|
|
|
print("shut down 2, 0 becomes a secondary.");
|
|
rs.stop(2);
|
|
|
|
rs.waitForState(rs.nodes[0], ReplSetTest.State.SECONDARY);
|
|
|
|
rs.restart(1, {"keyFile" : key1});
|
|
rs.restart(2, {"keyFile" : key1});
|
|
};
|
|
|
|
var name = "rs_auth2";
|
|
var path = "jstests/libs/";
|
|
|
|
// These keyFiles have their permissions set to 600 later in the test.
|
|
var key1 = path+"key1";
|
|
var key2 = path+"key2";
|
|
|
|
var rs = new ReplSetTest({name: name, nodes: 3});
|
|
var nodes = rs.startSet();
|
|
var hostnames = rs.nodeList();
|
|
rs.initiate({ "_id" : name,
|
|
"members" : [
|
|
{"_id" : 0, "host" : hostnames[0], "priority" : 2},
|
|
{"_id" : 1, "host" : hostnames[1], priority: 0},
|
|
{"_id" : 2, "host" : hostnames[2], priority: 0}
|
|
]});
|
|
|
|
var master = rs.getPrimary();
|
|
|
|
print("add an admin user");
|
|
master.getDB("admin").createUser({user: "foo", pwd: "bar", roles: jsTest.adminUserRoles},
|
|
{w: 3, wtimeout: 30000});
|
|
var m = rs.nodes[0];
|
|
|
|
print("starting 1 and 2 with key file");
|
|
rs.stop(1);
|
|
rs.restart(1, {"keyFile" : key1});
|
|
rs.stop(2);
|
|
rs.restart(2, {"keyFile" : key1});
|
|
|
|
// auth to all nodes with auth
|
|
rs.nodes[1].getDB("admin").auth("foo", "bar");
|
|
rs.nodes[2].getDB("admin").auth("foo", "bar");
|
|
testInvalidAuthStates();
|
|
|
|
print("restart mongod with bad keyFile");
|
|
|
|
rs.stop(0);
|
|
m = rs.restart(0, {"keyFile" : key2});
|
|
|
|
//auth to all nodes
|
|
rs.nodes[0].getDB("admin").auth("foo", "bar");
|
|
rs.nodes[1].getDB("admin").auth("foo", "bar");
|
|
rs.nodes[2].getDB("admin").auth("foo", "bar");
|
|
testInvalidAuthStates();
|
|
|
|
rs.stop(0);
|
|
m = rs.restart(0, {"keyFile" : key1});
|
|
|
|
print("0 becomes a secondary");
|