Skip to content

Commit 0ef16b9

Browse files
committed
Disable vtab auth by default
Signed-off-by: mkhullar <mohit.khullar@gmail.com>
1 parent cb74440 commit 0ef16b9

4 files changed

Lines changed: 4 additions & 4 deletions

File tree

db/comdb2.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -239,7 +239,7 @@ int64_t gbl_num_auth_allowed = 0;
239239
int64_t gbl_num_auth_denied = 0;
240240
int gbl_allow_old_authn = 1;
241241
int gbl_uses_externalauth = 0;
242-
int gbl_vtab_externalauth = 1;
242+
int gbl_vtab_externalauth = 0;
243243
int gbl_vtab_externalauth_strict = 0;
244244
#ifdef COMDB2_TEST
245245
int gbl_uses_simpleauth = 0;

db/db_tunables.h

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2431,7 +2431,7 @@ REGISTER_TUNABLE("externalauth", NULL, TUNABLE_BOOLEAN, &gbl_uses_externalauth,
24312431
REGISTER_TUNABLE("externalauth_connect", "Check for externalauth only once on connect", TUNABLE_BOOLEAN,
24322432
&gbl_uses_externalauth_connect, NOARG | READEARLY, NULL, NULL, NULL, NULL);
24332433

2434-
REGISTER_TUNABLE("vtab_externalauth", "Use IAM for vtab access control (Default: on)", TUNABLE_BOOLEAN,
2434+
REGISTER_TUNABLE("vtab_externalauth", "Use IAM for vtab access control (Default: off)", TUNABLE_BOOLEAN,
24352435
&gbl_vtab_externalauth, 0, NULL, NULL, NULL, NULL);
24362436

24372437
REGISTER_TUNABLE("vtab_externalauth_strict", "Enforce access control on all CDB2_ALLOW_USER vtabs (Default: off)",

tests/simpleauth.test/lrl.options

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
simpleauth
22
dohsql_disable 0
33
dohast_disable 0
4-
vtab_externalauth
4+
vtab_externalauth 1

tests/tunables.test/t00_all_tunables.expected

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1151,7 +1151,7 @@
11511151
(name='view_feature', description='Enables support for VIEWs (Default: ON)', type='BOOLEAN', value='ON', read_only='N')
11521152
(name='views_dft_preempt_roll_secs', description='Amount of seconds to run phase 1 of time partition rollout before phase 2', type='INTEGER', value='1800', read_only='N')
11531153
(name='views_dft_roll_delete_lag_secs', description='Amount of seconds to run phase 3 of time partition rollout after phase 2', type='INTEGER', value='5', read_only='N')
1154-
(name='vtab_externalauth', description='Use IAM for vtab access control (Default: on)', type='BOOLEAN', value='ON', read_only='N')
1154+
(name='vtab_externalauth', description='Use IAM for vtab access control (Default: off)', type='BOOLEAN', value='OFF', read_only='N')
11551155
(name='vtab_externalauth_strict', description='Enforce access control on all CDB2_ALLOW_USER vtabs (Default: off)', type='BOOLEAN', value='OFF', read_only='N')
11561156
(name='wait_for_prepare_seqnum', description='Wait-for-seqnum for prepare records. (Default: on)', type='BOOLEAN', value='ON', read_only='N')
11571157
(name='wait_for_seqnum_trace', description='', type='BOOLEAN', value='OFF', read_only='N')

0 commit comments

Comments
 (0)