Skip to content

DOCS-10448: KeysRotationIntervalSec server parameter #3144

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Dec 5, 2017
Merged

DOCS-10448: KeysRotationIntervalSec server parameter #3144

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions source/reference/parameters.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -131,6 +131,21 @@ Authentication Parameters

See :ref:`localhost-exception` for more information.

.. parameter:: KeysRotationIntervalSec

.. versionadded:: 3.6

*Default*: 7776000 seconds (90 days)

Specifies the number of seconds for which an `HMAC signing key
<https://en.wikipedia.org/wiki/Hash-based_message_authentication_code>`_
is valid before rotating to the next one. This parameter is intended
primarily to facilitate authentication testing.

You can only set :parameter:`KeysRotationIntervalSec` during
start-up, and cannot change this setting with the
:dbcommand:`setParameter` database command.

.. parameter:: ldapUserCacheInvalidationInterval

For use with MongoDB servers using :ref:`security-ldap-external`.
Expand Down
5 changes: 5 additions & 0 deletions source/release-notes/3.6.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -634,6 +634,11 @@ MongoDB 3.6 includes the following enhancements:
output from both operations now includes a timestamp for when
the plans were generated.

- The new :parameter:`KeysRotationIntervalSec` server parameter
specifies the number of seconds for which an `HMAC signing key
<https://en.wikipedia.org/wiki/Hash-based_message_authentication_code>`_
is valid before rotating to the next one.

Changes Affecting Compatibility
-------------------------------

Expand Down