Skip to content

Commit 52479d9

Browse files
committed
DOCS-14793 FIPS mode default behavior update
1 parent 2405b95 commit 52479d9

File tree

4 files changed

+21
-0
lines changed

4 files changed

+21
-0
lines changed
Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
Starting in MongoDB 5.1, instances running in
2+
:ref:`FIPS mode <fips-overview>` have the
3+
:ref:`SCRAM-SHA-1 authentication mechanism <authentication-parameters>`
4+
disabled by default. You can enable the :ref:`SCRAM-SHA-1 authentication
5+
mechanism <authentication-parameters>` with the
6+
:ref:`setParameter.authenticationMechanisms
7+
<set-parameter-authenticationMechanisms-code>` command.
8+
9+
This change will not affect drivers which target MongoDB
10+
:dbcommand:`setFeatureCompatibilityVersion` 4.0+.

source/reference/parameters.txt

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -51,6 +51,8 @@ Parameters
5151

5252
.. |both| replace:: Available for both :binary:`~bin.mongod` and :binary:`~bin.mongos`.
5353

54+
.. _authentication-parameters:
55+
5456
Authentication Parameters
5557
~~~~~~~~~~~~~~~~~~~~~~~~~
5658

@@ -75,6 +77,8 @@ Authentication Parameters
7577
For example, to specify both ``PLAIN`` and ``SCRAM-SHA-256`` as the
7678
authentication mechanisms, use the following command:
7779

80+
.. _set-parameter-authenticationMechanisms-code:
81+
7882
.. code-block:: bash
7983

8084
mongod --setParameter authenticationMechanisms=PLAIN,SCRAM-SHA-256 --auth

source/release-notes/5.1-compatibility.txt

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -68,6 +68,11 @@ Auditing
6868
General Changes
6969
---------------
7070

71+
FIPS Mode Defaults SCRAM-SHA-1 Authentication to Off
72+
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
73+
74+
.. include:: /includes/fact-5.1-scram-sha-1-fips-default.rst
75+
7176
``$mod`` Error Behavior
7277
~~~~~~~~~~~~~~~~~~~~~~~
7378

source/tutorial/configure-fips.txt

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -241,4 +241,6 @@ Select the tab below for your platform:
241241
Additional Considerations
242242
--------------------------
243243

244+
.. include:: /includes/fact-5.1-scram-sha-1-fips-default.rst
245+
244246
.. include:: /includes/extracts/4.2-changes-fips.rst

0 commit comments

Comments
 (0)