Skip to content

Commit ed9f4c1

Browse files
DOCS-15627 Noted SCRAM-SHA-256 as default user auth mechanism (#4011)
* Noted SCRAM-SHA-256 as default user auth mechanism * Moved default notice * Internal review feedback * Checking rendering as note * Wording clarification * External review feedback
1 parent bc9d05d commit ed9f4c1

File tree

1 file changed

+12
-8
lines changed

1 file changed

+12
-8
lines changed

source/reference/connection-string.txt

Lines changed: 12 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1036,26 +1036,30 @@ credentials are authenticated against the ``admin`` database.
10361036

10371037
* - .. urioption:: authMechanism
10381038

1039-
- Specify the authentication mechanism that MongoDB will use to
1040-
authenticate the connection. Possible values include:
1039+
Default: SCRAM-SHA-256
1040+
1041+
- Specify the authentication mechanism that MongoDB uses to
1042+
authenticate the connection. If you don't specify an
1043+
``authMechanism`` but provide user credentials, MongoDB attempts
1044+
to use SCRAM-SHA-256. If this fails, it falls back to
1045+
SCRAM-SHA-1.
10411046

10421047
- :ref:`SCRAM-SHA-1 <authentication-scram-sha-1>`
10431048

1044-
- :ref:`SCRAM-SHA-256 <authentication-scram-sha-256>` (*Added in MongoDB 4.0*)
1049+
- :ref:`SCRAM-SHA-256 <authentication-scram-sha-256>`
10451050

10461051
- :ref:`MONGODB-X509 <security-auth-x509>`
10471052

10481053
- ``MONGODB-AWS`` (*Added in MongoDB 4.4*)
10491054

10501055
- :ref:`GSSAPI <security-auth-kerberos>` (Kerberos)
10511056

1052-
- :ref:`PLAIN <security-auth-ldap>` (LDAP SASL)
1057+
- :ref:`PLAIN <security-auth-ldap>` (LDAP SASL)
10531058

1054-
MongoDB 4.0 removes support for the ``MONGODB-CR``
1055-
authentication mechanism. You cannot specify ``MONGODB-CR`` as
1056-
the authentication mechanism when connecting to MongoDB 4.0+
1057-
deployments.
1059+
.. note::
10581060

1061+
1062+
10591063
Only MongoDB Enterprise :binary:`~bin.mongod` and
10601064
:binary:`~bin.mongos` instances provide ``GSSAPI`` (Kerberos) and
10611065
``PLAIN`` (LDAP) mechanisms.

0 commit comments

Comments
 (0)