Skip to content

Commit 2f79c0e

Browse files
author
Dave
authored
DOCSP-21466 support for CANONICALIZE_HOST_NAME (#204)
* DOCSP-21466 support for CANONICALIZE_HOST_NAME * Review feedback * Review feedback
1 parent 525eae9 commit 2f79c0e

File tree

2 files changed

+11
-13
lines changed

2 files changed

+11
-13
lines changed

source/connect.txt

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -267,14 +267,11 @@ To disconnect from a deployment and exit ``mongosh``, you can:
267267
Limitations
268268
-----------
269269

270-
- ``mongosh`` has the following
271-
:manual:`Kerberos authentication </core/kerberos/>` limitations:
272-
273-
- ``authMechanismProperties=CANONICALIZE_HOST_NAME:true|false`` is not
274-
permitted in the connection string. Instead, specify hostname
275-
canonicalization in the connection string with
276-
``authMechanismProperties=gssapiCanonicalizeHostName:true|false``.
277-
- Hostname canonicalization reverse lookup is not supported.
270+
- :manual:`Kerberos authentication </core/kerberos/>` does not permit
271+
``authMechanismProperties=CANONICALIZE_HOST_NAME:true|false`` in the
272+
connection string. Use one of:
273+
``authMechanismProperties=CANONICALIZE_HOST_NAME:forward|forwardAndReverse|none``
274+
instead.
278275

279276
- ``mongosh`` currently only supports the ``zlib``
280277
:manual:`compressor </core/wiredtiger/#compression>`. The following

source/reference/options.txt

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -419,11 +419,12 @@ Authentication Options
419419
If :option:`--sspiHostnameCanonicalization
420420
<--sspiHostnameCanonicalization>` is set to:
421421

422-
- ``forward``, the effect is the same as setting ``authMechanismProperties=CANONICALIZE_HOST_NAME:true``.
423-
- ``none``, the effect is the same as setting ``authMechanismProperties=CANONICALIZE_HOST_NAME:false``.
424-
425-
:option:`--sspiHostnameCanonicalization
426-
<--sspiHostnameCanonicalization>` cannot be set to ``forwardAndReverse``.
422+
- ``forwardAndReverse``, performs a forward DNS lookup and then a
423+
reverse lookup. New in ``mongosh`` 1.3.0.
424+
- ``forward``, the effect is the same as setting
425+
``authMechanismProperties=CANONICALIZE_HOST_NAME:true``.
426+
- ``none``, the effect is the same as setting
427+
``authMechanismProperties=CANONICALIZE_HOST_NAME:false``.
427428

428429
.. option:: --password <password>, -p <password>
429430

0 commit comments

Comments
 (0)