Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

User management in replicasets / sharding #344

Open
wants to merge 20 commits into
base: master
Choose a base branch
from
Open

User management in replicasets / sharding #344

wants to merge 20 commits into from

Conversation

cjhubert
Copy link

@cjhubert cjhubert commented Oct 9, 2014

The goal of this PR is to fix the inability to create users in a sharded / replicaset cluster. The main problems were:

  1. It was basing whether to authenticate with the node / create the admin user based on node[mongodb][config][auth] = true. However, auth=true is not a valid ini setting for mongos instances, so mongos would fail to start. (Solved this by creating a separate variable called mongos_create_admin which should be set to true on mongos instances.)
  2. The mongo ruby driver would fail to connect to mongo while it was in the process of configuring the nodes for replicaset and sharding. According to the FAQ, reconnections are not handled by the driver, and should be handled solely by the application. (Solved by adding in retires, similar to ones that already existed in the libraries file.)

This PR also includes the separation of [admin][user/pass] and [authentication][user/pass] so that users should be able to change the administrator password of existing administrators.

An example of this working in chef-solo Vagrant can be found here.

Issues: #333, #327, #326

@cjhubert
adding authentication setting for admin separate from user creation
a11f293
@cjhubert
instructions on how to update admin password and making the defaults …
930303e 
…more concise
@cjhubert
handling attempting to create users on secondary / uninitialized repl…
a840e84 
…ica sets
@cjhubert
waiting for replica set initialization before creating users
5859f47
@cjhubert
updating read me for instructions on key file in replica sets
e96aa49
@cjhubert
removing random semi-colons from line termination
9c7fc0c
@cjhubert
switching from immediately to delayed
3c603f7
@cjhubert
adding ability to force creation of admin users in mongos since auth …
694edd4 
…= true is not a valid config flag
@cjhubert
Merge branch 'admin-user-update' of github.com:ceejh/chef-mongodb int…
bcd4950 
…o users-in-replicasets

Conflicts:
	providers/user.rb
@cjhubert
adding new attributes for handling mongos and mongod nodes
03e75d0
@cjhubert
adding fallback strategy for mongod replica set nodes
bbde9b8
@cjhubert
changing subscribed ruby_block
df7c00d
@cjhubert
using a check if recipe is in run list instead of basing it off attri…
54c8358 
…butes
@cjhubert
adding retry attempts to connection for when service is in the middle…
fb38904 
… of restarting (mostly mongos)
@cjhubert
adding authentication to mongos commands where required in user_manag…
fb0fe23 
…ement is used
@cjhubert
giving a little more time to the connection retries as mongos can be …
c0577b7 
…slow on some machines
@cjhubert
adding rescue connection failures to configuring shards since it can'…
823d3dd 
…t connect while mongos is restarting
@cjhubert
rubocop warnings / typo
bcc62ad
@cjhubert
adding instructions on mongos specific config
cd06d19
@cjhubert
fixing typo in node configuration value
d1e2ee2
@jamesonjlee jamesonjlee self-assigned this Oct 16, 2014
@janemiceli
Copy link

Is it possible to get this merged?

@luishdez luishdez mentioned this pull request May 9, 2015
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
bug enhancement
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@cjhubert @janemiceli @jamesonjlee