)]}'
{"specs/liberty/mongodb-users.rst":[{"author":{"_account_id":9664,"name":"amrith","email":"amrith.kumar@gmail.com","username":"amrith"},"change_message_id":"f50dcebd1bd3b16bb5aa2e9f146470443a87c1d3","unresolved":false,"context_lines":[{"line_number":95,"context_line":"The mongodb configuration file will have \u0027auth\u0027 set to \u0027on\u0027 to enable"},{"line_number":96,"context_line":"authentication on the server."},{"line_number":97,"context_line":""},{"line_number":98,"context_line":"A new MongoDB RC script will be created at ~/.mongorc.js. This file will store"},{"line_number":99,"context_line":"the username and generated password, allowing the local MongoDB client to"},{"line_number":100,"context_line":"automatically connect using those credentials."},{"line_number":101,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"7a016987_e980d14b","line":98,"updated":"2015-05-25 14:39:05.000000000","message":"Is there any impact on instance resize? I saw the reference to ~ in the cassandra spec as well. Unsure if there is one, just thinking out loud here.","commit_id":"459e1d77d1d6cf7ace3a169623bb139865daf75d"},{"author":{"_account_id":7806,"name":"Sushil Kumar","email":"skm.net@gmail.com","username":"sushilkm"},"change_message_id":"fdda1aeaa847a043c0e031871ae63020e942cb4f","unresolved":false,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":"Features"},{"line_number":36,"context_line":"--------"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Functions"},{"line_number":39,"context_line":"~~~~~~~~~"},{"line_number":40,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_d53a31cd","line":37,"updated":"2015-06-02 06:44:59.000000000","message":"There should be some one liner description here about features, as it looks a bit weird in published docs\n\nhttp://docs-draft.openstack.org/26/184826/3/check/gate-trove-specs-docs/e5276b9//doc/build/html/specs/liberty/mongodb-users.html","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"2a99960815b9aa59d74cdff6431aa893f1f35c45","unresolved":false,"context_lines":[{"line_number":34,"context_line":""},{"line_number":35,"context_line":"Features"},{"line_number":36,"context_line":"--------"},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Functions"},{"line_number":39,"context_line":"~~~~~~~~~"},{"line_number":40,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_23d26201","line":37,"in_reply_to":"5afe65bd_d53a31cd","updated":"2015-06-02 13:09:51.000000000","message":"Ok","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"4027f5fc485c895550bbe90b6430b68000792ac7","unresolved":false,"context_lines":[{"line_number":47,"context_line":"5. root-show"},{"line_number":48,"context_line":"6. user-grant-access"},{"line_number":49,"context_line":"7. user-revoke-access"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"The code changes will be to implement a new class service.MongoAdmin and the"},{"line_number":52,"context_line":"corresponding methods as members of the class. The methods of manager.Manager"},{"line_number":53,"context_line":"will be updated to call the admin functions."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_3f1724a5","line":50,"updated":"2015-06-02 05:54:02.000000000","message":"Hpw about user-list-access. I think you will have to implement it anyways for some of the other user-management related features to work.","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"2a99960815b9aa59d74cdff6431aa893f1f35c45","unresolved":false,"context_lines":[{"line_number":47,"context_line":"5. root-show"},{"line_number":48,"context_line":"6. user-grant-access"},{"line_number":49,"context_line":"7. user-revoke-access"},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"The code changes will be to implement a new class service.MongoAdmin and the"},{"line_number":52,"context_line":"corresponding methods as members of the class. The methods of manager.Manager"},{"line_number":53,"context_line":"will be updated to call the admin functions."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_63e73ae5","line":50,"in_reply_to":"5afe65bd_3f1724a5","updated":"2015-06-02 13:09:51.000000000","message":"Good point. Will do.","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":7806,"name":"Sushil Kumar","email":"skm.net@gmail.com","username":"sushilkm"},"change_message_id":"fdda1aeaa847a043c0e031871ae63020e942cb4f","unresolved":false,"context_lines":[{"line_number":68,"context_line":""},{"line_number":69,"context_line":"::"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"    use admin"},{"line_number":72,"context_line":"    db.createUser("},{"line_number":73,"context_line":"        {"},{"line_number":74,"context_line":"            user: \"os_admin\","}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_9534b9de","line":71,"updated":"2015-06-02 06:44:59.000000000","message":"s/use/user","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"2a99960815b9aa59d74cdff6431aa893f1f35c45","unresolved":false,"context_lines":[{"line_number":68,"context_line":""},{"line_number":69,"context_line":"::"},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"    use admin"},{"line_number":72,"context_line":"    db.createUser("},{"line_number":73,"context_line":"        {"},{"line_number":74,"context_line":"            user: \"os_admin\","}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_43143ef4","line":71,"in_reply_to":"5afe65bd_9534b9de","updated":"2015-06-02 13:09:51.000000000","message":"use \u003cdatabase\u003e tells mongo to use the given database. In this case we want to use the special admin database.","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":7806,"name":"Sushil Kumar","email":"skm.net@gmail.com","username":"sushilkm"},"change_message_id":"fdda1aeaa847a043c0e031871ae63020e942cb4f","unresolved":false,"context_lines":[{"line_number":84,"context_line":"Authentication will be enabled by default. To disable it a configuration group"},{"line_number":85,"context_line":"can be used with the option {\u0027auth\u0027: \u0027false\u0027}."},{"line_number":86,"context_line":""},{"line_number":87,"context_line":"Note on authentication and clustering: enabling authentication on MongoDB"},{"line_number":88,"context_line":"servers requires shards to use a shared key file. Therefore a new"},{"line_number":89,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":90,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_d541113b","line":87,"updated":"2015-06-02 06:44:59.000000000","message":"This should be just \"Note:\" rest could be clarified in following text","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":7806,"name":"Sushil Kumar","email":"skm.net@gmail.com","username":"sushilkm"},"change_message_id":"fdda1aeaa847a043c0e031871ae63020e942cb4f","unresolved":false,"context_lines":[{"line_number":88,"context_line":"servers requires shards to use a shared key file. Therefore a new"},{"line_number":89,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":90,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":91,"context_line":"stored for connection use."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":""},{"line_number":94,"context_line":"Configuration"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_b5ac55ee","line":91,"updated":"2015-06-02 06:44:59.000000000","message":"Would this be part of the change implementing the user features","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"2a99960815b9aa59d74cdff6431aa893f1f35c45","unresolved":false,"context_lines":[{"line_number":88,"context_line":"servers requires shards to use a shared key file. Therefore a new"},{"line_number":89,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":90,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":91,"context_line":"stored for connection use."},{"line_number":92,"context_line":""},{"line_number":93,"context_line":""},{"line_number":94,"context_line":"Configuration"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_43031e74","line":91,"in_reply_to":"5afe65bd_b5ac55ee","updated":"2015-06-02 13:09:51.000000000","message":"There will be a commit that does some prerequisite work for both the mongodb-databases and -users items. This work will be done there.","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"4027f5fc485c895550bbe90b6430b68000792ac7","unresolved":false,"context_lines":[{"line_number":148,"context_line":"6. grant user access to a database - using \u0027updateUser()\u0027"},{"line_number":149,"context_line":"7. revoke user access to a database - using \u0027updateUser()\u0027"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"Alternatives"},{"line_number":153,"context_line":"------------"},{"line_number":154,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_5f4ae084","line":151,"updated":"2015-06-02 05:54:02.000000000","message":"Shouldnt we include the changes you will have to make to the create_cluster function to address the concern of the shards requiring a shared key.","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"2a99960815b9aa59d74cdff6431aa893f1f35c45","unresolved":false,"context_lines":[{"line_number":148,"context_line":"6. grant user access to a database - using \u0027updateUser()\u0027"},{"line_number":149,"context_line":"7. revoke user access to a database - using \u0027updateUser()\u0027"},{"line_number":150,"context_line":""},{"line_number":151,"context_line":""},{"line_number":152,"context_line":"Alternatives"},{"line_number":153,"context_line":"------------"},{"line_number":154,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_23270214","line":151,"in_reply_to":"5afe65bd_5f4ae084","updated":"2015-06-02 13:09:51.000000000","message":"That will be transparent to the user so I didn\u0027t include it here, but that work will be included.","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"4027f5fc485c895550bbe90b6430b68000792ac7","unresolved":false,"context_lines":[{"line_number":179,"context_line":"b) create/list/delete users"},{"line_number":180,"context_line":"c) enable/check root"},{"line_number":181,"context_line":"d) grant/revoke access"},{"line_number":182,"context_line":""},{"line_number":183,"context_line":""},{"line_number":184,"context_line":"Upgrade Implications"},{"line_number":185,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_df5ed044","line":182,"updated":"2015-06-02 05:54:02.000000000","message":"Same concern as above regarding the work on create_clusters.","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"2a99960815b9aa59d74cdff6431aa893f1f35c45","unresolved":false,"context_lines":[{"line_number":179,"context_line":"b) create/list/delete users"},{"line_number":180,"context_line":"c) enable/check root"},{"line_number":181,"context_line":"d) grant/revoke access"},{"line_number":182,"context_line":""},{"line_number":183,"context_line":""},{"line_number":184,"context_line":"Upgrade Implications"},{"line_number":185,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_c31dcebe","line":182,"in_reply_to":"5afe65bd_df5ed044","updated":"2015-06-02 13:09:51.000000000","message":"Those changes will be in commit a)","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":7806,"name":"Sushil Kumar","email":"skm.net@gmail.com","username":"sushilkm"},"change_message_id":"fdda1aeaa847a043c0e031871ae63020e942cb4f","unresolved":false,"context_lines":[{"line_number":211,"context_line":"References"},{"line_number":212,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":213,"context_line":""},{"line_number":214,"context_line":"There are no external references in this document."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_b5da1577","line":214,"updated":"2015-06-02 06:44:59.000000000","message":"I think, mongodb references about the methods going to be used could be utilized here","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"2a99960815b9aa59d74cdff6431aa893f1f35c45","unresolved":false,"context_lines":[{"line_number":211,"context_line":"References"},{"line_number":212,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":213,"context_line":""},{"line_number":214,"context_line":"There are no external references in this document."}],"source_content_type":"text/x-rst","patch_set":3,"id":"5afe65bd_e320caf9","line":214,"in_reply_to":"5afe65bd_b5da1577","updated":"2015-06-02 13:09:51.000000000","message":"Ok","commit_id":"6a9041cdcf728ef5d96dc2bacd9e2751a5547ccc"},{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"a24664a590e6880fac9b48c7fbb475d613001bd2","unresolved":false,"context_lines":[{"line_number":52,"context_line":"6. user-grant-access"},{"line_number":53,"context_line":"7. user-revoke-access"},{"line_number":54,"context_line":"8. user-access"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"The code changes will be to implement a new class service.MongoAdmin and the"},{"line_number":57,"context_line":"corresponding methods as members of the class. The methods of manager.Manager"},{"line_number":58,"context_line":"will be updated to call the admin functions."}],"source_content_type":"text/x-rst","patch_set":4,"id":"5afe65bd_fa7e23ad","line":55,"updated":"2015-06-02 16:24:40.000000000","message":"The Trove command for this is user-show-access and there is also user-show. These are the commands I believe you will have to implement anyways.","commit_id":"f2b70e538e0a143d8e9e9062f1749fe40e2bbdf9"},{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"a24664a590e6880fac9b48c7fbb475d613001bd2","unresolved":false,"context_lines":[{"line_number":151,"context_line":"4. enable root - create user \"root\" and grant the role \"root\""},{"line_number":152,"context_line":"5. check if root is enabled - check if user \"root\" exists"},{"line_number":153,"context_line":"6. grant user access to a database - using \u0027updateUser()\u0027"},{"line_number":154,"context_line":"7. revoke user access to a database - using \u0027updateUser()\u0027"},{"line_number":155,"context_line":"8. show user access to a database - using \u0027getUser()\u0027"},{"line_number":156,"context_line":""},{"line_number":157,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"5afe65bd_dd37e1ae","line":154,"updated":"2015-06-02 16:24:40.000000000","message":"This is where I was asking about the link between deleting a database and revoking user access to this database in the spec for adding database management functionality for MongoDB.","commit_id":"f2b70e538e0a143d8e9e9062f1749fe40e2bbdf9"},{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"a24664a590e6880fac9b48c7fbb475d613001bd2","unresolved":false,"context_lines":[{"line_number":182,"context_line":"The work will be split into four deliverables:"},{"line_number":183,"context_line":""},{"line_number":184,"context_line":"a) Enable authentication on server"},{"line_number":185,"context_line":"b) create/list/delete users"},{"line_number":186,"context_line":"c) enable/check root"},{"line_number":187,"context_line":"d) grant/revoke access"},{"line_number":188,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"5afe65bd_5d4c1142","line":185,"updated":"2015-06-02 16:24:40.000000000","message":"create/list/show/delete users","commit_id":"f2b70e538e0a143d8e9e9062f1749fe40e2bbdf9"},{"author":{"_account_id":10295,"name":"mariam john","email":"mariamj@us.ibm.com","username":"mariamj"},"change_message_id":"a24664a590e6880fac9b48c7fbb475d613001bd2","unresolved":false,"context_lines":[{"line_number":185,"context_line":"b) create/list/delete users"},{"line_number":186,"context_line":"c) enable/check root"},{"line_number":187,"context_line":"d) grant/revoke access"},{"line_number":188,"context_line":""},{"line_number":189,"context_line":""},{"line_number":190,"context_line":"Upgrade Implications"},{"line_number":191,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"}],"source_content_type":"text/x-rst","patch_set":4,"id":"5afe65bd_dd5ec1e8","line":188,"updated":"2015-06-02 16:24:40.000000000","message":"grant/show/revoke access","commit_id":"f2b70e538e0a143d8e9e9062f1749fe40e2bbdf9"},{"author":{"_account_id":6413,"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com","username":"vkmc"},"change_message_id":"ee92b7c67dafd597080bc396590eb24880405144","unresolved":false,"context_lines":[{"line_number":44,"context_line":""},{"line_number":45,"context_line":"Several standard Trove commands will be enabled for MongoDB:"},{"line_number":46,"context_line":""},{"line_number":47,"context_line":"1. user-create"},{"line_number":48,"context_line":"2. user-list"},{"line_number":49,"context_line":"3. user-delete"},{"line_number":50,"context_line":"4. user-show"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_80fe9969","line":47,"updated":"2015-06-02 18:35:47.000000000","message":"Perhaps using an unordered list would make more sense here :)","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":5293,"name":"Nikhil","email":"SlickNik@gmail.com","username":"slicknik"},"change_message_id":"7c30ebcde4319e5591ce2409b157f00fa7d90770","unresolved":false,"context_lines":[{"line_number":93,"context_line":"Note: enabling authentication on MongoDB effects clustering as shards are"},{"line_number":94,"context_line":"required to use a shared key file to connect to each other. Therefore a new"},{"line_number":95,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":96,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":97,"context_line":"stored for connection use."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_c0c6bb48","line":96,"updated":"2015-06-03 07:44:09.000000000","message":"Where will this key be stored? What if I want to add a shard to the cluster at a later time?","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"cc21d0dd5844fbe69c8fcab6e3b6095bb23684e3","unresolved":false,"context_lines":[{"line_number":93,"context_line":"Note: enabling authentication on MongoDB effects clustering as shards are"},{"line_number":94,"context_line":"required to use a shared key file to connect to each other. Therefore a new"},{"line_number":95,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":96,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":97,"context_line":"stored for connection use."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_0d3a8ccc","line":96,"in_reply_to":"5afe65bd_28431144","updated":"2015-06-04 13:02:29.000000000","message":"The key has to be stored on each guest. The problem is to avoid storing it on the controller. During add_shard a call can be made to the guest asking for the value before passing it to the new shard.","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"99f147da8c3bdee5588bba41b327922d8a7d31b1","unresolved":false,"context_lines":[{"line_number":93,"context_line":"Note: enabling authentication on MongoDB effects clustering as shards are"},{"line_number":94,"context_line":"required to use a shared key file to connect to each other. Therefore a new"},{"line_number":95,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":96,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":97,"context_line":"stored for connection use."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_28431144","line":96,"in_reply_to":"5afe65bd_c0c6bb48","updated":"2015-06-03 21:23:35.000000000","message":"This needs further thought. I was unaware that the Cluster class instance is only temporary.","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":5293,"name":"Nikhil","email":"SlickNik@gmail.com","username":"slicknik"},"change_message_id":"7c30ebcde4319e5591ce2409b157f00fa7d90770","unresolved":false,"context_lines":[{"line_number":94,"context_line":"required to use a shared key file to connect to each other. Therefore a new"},{"line_number":95,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":96,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":97,"context_line":"stored for connection use."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Configuration"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_a0773f39","line":97,"updated":"2015-06-03 07:44:09.000000000","message":"Instead of creating and pushing a shared private key, it would be more secure to generate the private keys on the shards themselves, and push around and manage only the corresponding public keys.\n\nThis would also get us out of the business of storing the private key.","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"ad9d10be8e542ed2144bd19f0cca3a0c3f4d7a28","unresolved":false,"context_lines":[{"line_number":94,"context_line":"required to use a shared key file to connect to each other. Therefore a new"},{"line_number":95,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":96,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":97,"context_line":"stored for connection use."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Configuration"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3afb71cf_65885d23","line":97,"in_reply_to":"3afb71cf_ef254ec2","updated":"2015-06-05 17:56:09.000000000","message":"Yes but that is much more involved and out of scope for what I am trying to do.","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":4240,"name":"Craig Vyvial","email":"cp16net@gmail.com","username":"cp16net"},"change_message_id":"d531348de7980680fa09fd606e0b672ad4fd1037","unresolved":false,"context_lines":[{"line_number":94,"context_line":"required to use a shared key file to connect to each other. Therefore a new"},{"line_number":95,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":96,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":97,"context_line":"stored for connection use."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Configuration"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3afb71cf_ef254ec2","line":97,"in_reply_to":"5afe65bd_8851e510","updated":"2015-06-05 17:09:46.000000000","message":"Unless i am mistaken this looks like mongo can use x509 instead of just keyfiles. http://docs.mongodb.org/manual/tutorial/configure-x509-member-authentication/","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":15321,"name":"Matthew Van Dijk","email":"mvandijk@tesora.com","username":"mvandijk"},"change_message_id":"99f147da8c3bdee5588bba41b327922d8a7d31b1","unresolved":false,"context_lines":[{"line_number":94,"context_line":"required to use a shared key file to connect to each other. Therefore a new"},{"line_number":95,"context_line":"cryptographically secure key will be generated during cluster-create to be used"},{"line_number":96,"context_line":"by the shards. This key value will be pushed to each shard, where it will be"},{"line_number":97,"context_line":"stored for connection use."},{"line_number":98,"context_line":""},{"line_number":99,"context_line":""},{"line_number":100,"context_line":"Configuration"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_8851e510","line":97,"in_reply_to":"5afe65bd_a0773f39","updated":"2015-06-03 21:23:35.000000000","message":"It is not a public/private key system. It is just the same key stored in a file. See http://docs.mongodb.org/manual/tutorial/enable-authentication-in-sharded-cluster/","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":6413,"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com","username":"vkmc"},"change_message_id":"ee92b7c67dafd597080bc396590eb24880405144","unresolved":false,"context_lines":[{"line_number":146,"context_line":""},{"line_number":147,"context_line":"The Guest Agent will be changed to support the following manager functions:"},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"1. create user - using \u0027createUser()\u0027"},{"line_number":150,"context_line":"2. list users - query the admin database\u0027s system.users collection"},{"line_number":151,"context_line":"3. delete user - using \u0027dropUser()\u0027"},{"line_number":152,"context_line":"4. show user - using \u0027getUser()\u0027"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_40278112","line":149,"updated":"2015-06-02 18:35:47.000000000","message":"NIT: Ditto","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":6413,"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com","username":"vkmc"},"change_message_id":"ee92b7c67dafd597080bc396590eb24880405144","unresolved":false,"context_lines":[{"line_number":183,"context_line":""},{"line_number":184,"context_line":"The work will be split into four deliverables:"},{"line_number":185,"context_line":""},{"line_number":186,"context_line":"a) Enable authentication on server"},{"line_number":187,"context_line":"b) create/list/show/delete users"},{"line_number":188,"context_line":"c) enable/check root"},{"line_number":189,"context_line":"d) grant/show/revoke access"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_002189fb","line":186,"updated":"2015-06-02 18:35:47.000000000","message":"NIT: Now it makes sense to have an ordered list","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"},{"author":{"_account_id":6413,"name":"Victoria Martinez de la Cruz","email":"victoria@redhat.com","username":"vkmc"},"change_message_id":"ee92b7c67dafd597080bc396590eb24880405144","unresolved":false,"context_lines":[{"line_number":219,"context_line":"References"},{"line_number":220,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":221,"context_line":""},{"line_number":222,"context_line":"http://docs.mongodb.org/manual/"}],"source_content_type":"text/x-rst","patch_set":5,"id":"5afe65bd_e0742dfe","line":222,"updated":"2015-06-02 18:35:47.000000000","message":"Could you add a link for this?","commit_id":"69c36e89106f13539b1dbafa83f9dbe9d2f1575c"}]}