Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-50304

Old settings field missing in event log upon changing tls min version for the first time

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 7.1.0
    • 7.1.0
    • ns_server
    • None
    • Centos 7 64 bit; CB EE 7.1.0-1985

    Description

      Summary

      Upon changing the TLS min version for the very first time, the "old settings" field is empty. 

      /opt/couchbase/bin/couchbase-cli setting-security -c 172.23.137.157:8091 -u Administrator -p password --set --tls-min-version tlsv1.1

      generates:

      [{"timestamp":"2022-01-10T08:07:36.925Z","event_id":9220,"component":"security","description":"Security config changed","severity":"info","node":"172.23.137.157","otp_node":"ns_1@172.23.137.157","uuid":"50150eb0-ff93-4179-9b6a-f72062b585c3","extra_attributes":{"old_settings":{},"new_settings":{"ssl_minimum_protocol":"tlsv1.1"}}}]

      (from second time onwards, it gets populated fine as expected)

      It'd be good to populate the old settings key even on the first time to be consistent and uniform, I think. For example, upon changing the password policy the first time, the old settings field is populated with default values.

      [{"timestamp":"2022-01-10T08:05:32.490Z","event_id":9222,"component":"security","description":"Password policy changed","severity":"info","node":"172.23.137.157","otp_node":"ns_1@172.23.137.157","uuid":"b288c033-ea00-4043-8278-cfd1e48ff80e","extra_attributes":{"old_settings":{"min_length":6,"must_present":[]},"new_settings":{"min_length":6,"must_present":[]}}}]

       

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            sumedh.basarkod Sumedh Basarkod (Inactive)
            sumedh.basarkod Sumedh Basarkod (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty