diff --git a/source/includes/fact-5.1-scram-sha-1-fips-default.rst b/source/includes/fact-5.1-scram-sha-1-fips-default.rst new file mode 100644 index 00000000000..485c1514836 --- /dev/null +++ b/source/includes/fact-5.1-scram-sha-1-fips-default.rst @@ -0,0 +1,10 @@ +Starting in MongoDB 5.1, instances running in +:ref:`FIPS mode ` have the +:ref:`SCRAM-SHA-1 authentication mechanism ` +disabled by default. You can enable the :ref:`SCRAM-SHA-1 authentication +mechanism ` with the +:ref:`setParameter.authenticationMechanisms +` command. + +This change will not affect drivers which target MongoDB +:dbcommand:`setFeatureCompatibilityVersion` 4.0+. \ No newline at end of file diff --git a/source/reference/parameters.txt b/source/reference/parameters.txt index 5c0f669cf80..ec2f5940466 100644 --- a/source/reference/parameters.txt +++ b/source/reference/parameters.txt @@ -51,6 +51,8 @@ Parameters .. |both| replace:: Available for both :binary:`~bin.mongod` and :binary:`~bin.mongos`. +.. _authentication-parameters: + Authentication Parameters ~~~~~~~~~~~~~~~~~~~~~~~~~ @@ -75,6 +77,8 @@ Authentication Parameters For example, to specify both ``PLAIN`` and ``SCRAM-SHA-256`` as the authentication mechanisms, use the following command: + .. _set-parameter-authenticationMechanisms-code: + .. code-block:: bash mongod --setParameter authenticationMechanisms=PLAIN,SCRAM-SHA-256 --auth diff --git a/source/release-notes/5.1-compatibility.txt b/source/release-notes/5.1-compatibility.txt index 64c8d64f8e7..7cda4a47e14 100644 --- a/source/release-notes/5.1-compatibility.txt +++ b/source/release-notes/5.1-compatibility.txt @@ -105,6 +105,11 @@ General Changes .. include:: /includes/fact-5.1-regex-document-schema-validation.rst +FIPS Mode Defaults SCRAM-SHA-1 Authentication to Off +~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + +.. include:: /includes/fact-5.1-scram-sha-1-fips-default.rst + ``$mod`` Error Behavior ~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/source/tutorial/configure-fips.txt b/source/tutorial/configure-fips.txt index 36787cc2483..e1ca162914a 100644 --- a/source/tutorial/configure-fips.txt +++ b/source/tutorial/configure-fips.txt @@ -241,4 +241,6 @@ Select the tab below for your platform: Additional Considerations -------------------------- +.. include:: /includes/fact-5.1-scram-sha-1-fips-default.rst + .. include:: /includes/extracts/4.2-changes-fips.rst