mongodump/mongorestore authentication failure with GSSAPI/Kerberos

[Brian Ciomei]

Hi everyone,

I'm having trouble making connections via GSSAPI/Keberos to my replicaset, but only when using mongodump/mongorestore. I'm running almost exactly the same command, but I can't login when using mongodump.

This works:

mongo --host fully.qualified.name -ssl -u username@REALM.COM --authenticationDatabase=$external --authenticationMechanism=GSSAPI

This fails:

mongodump --host fully.qualified.name -ssl -u username@REALM.COM --authenticationDatabase=$external --authenticationMechanism=GSSAPI -d database

Failure message I get is:

assertion: 17 SASL(-1): generic failure: SSPI: InitializeSecurityContext: The logon attempt failed

Which I'm pretty sure is the standard kerberos login failure message.

The user account is a dbOwner on the database I'm attempting to backup. I verified I'm able to read and write to that database when I login normally.

Is this a bug, or am I missing something?

Thanks!

[Brian Ciomei]

Oops, I left off version information. I'm on Mongo Enterprise 2.6.3, Windows Server 2008 SP1