Many “bad nonce received or getnonce not called” messages in mongo log.

79 views
Skip to first unread message

Roy

unread,
Jul 10, 2011, 11:33:41 PM7/10/11
to mongodb-user
Hi,

I found my mongo connection is auto-reset or failed sometimes, and
some useful message in my mongo log:

"auth: bad nonce received or getnonce not called. could be a driver
bug or a security attack. db:User"

With the help of "https://github.com/mongodb/mongo/blob/master/db/
security_commands.cpp", I got the information that the client sends
user_name, use_password, nonce to the server for the authentication,
and if the nonce sent by the client and distributed by the server are
different, the above message will be printed out.

Is there anything wrong with my mongo driver, or any other reasons?

Nat

unread,
Jul 10, 2011, 11:58:40 PM7/10/11
to mongod...@googlegroups.com
Which driver do you use and what does your environment config looks like?
--
You received this message because you are subscribed to the Google Groups "mongodb-user" group.
To post to this group, send email to mongod...@googlegroups.com.
To unsubscribe from this group, send email to mongodb-user...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/mongodb-user?hl=en.

Roy

unread,
Jul 11, 2011, 1:46:02 AM7/11/11
to mongodb-user
pymongo.

mongo version 1.6.5
pymongo version 1.9

I use python to connect and manipulate the mongo data. There are many
mongo connections at the same time, and each connection needs
authentication for some database.

Nat

unread,
Jul 11, 2011, 1:54:21 AM7/11/11
to mongod...@googlegroups.com
Can you see whether you can replicate the problem with pymongo 1.11?
-----Original Message-----
From: Roy <neverm...@gmail.com>

Roy

unread,
Jul 11, 2011, 3:10:38 AM7/11/11
to mongodb-user
Otherwise than the problem with the pymongo, is there any other
possibility?

Nat

unread,
Jul 11, 2011, 4:55:08 AM7/11/11
to mongod...@googlegroups.com
I don't think so. It hasn't been reported for a while already. It must have been a mix up in handling mongodb connection on the client side.

Roy

unread,
Jul 11, 2011, 10:16:26 PM7/11/11
to mongodb-user
OK, I have updated my pymongo version, and supervise my mongo log.
Thanks a lot.

Nat

unread,
Jul 12, 2011, 12:25:51 AM7/12/11
to mongod...@googlegroups.com
Do you still see the problem after upgrading?
-----Original Message-----
From: Roy <neverm...@gmail.com>
Sender: mongod...@googlegroups.com
Date: Mon, 11 Jul 2011 19:16:26
To: mongodb-user<mongod...@googlegroups.com>
Reply-To: mongod...@googlegroups.com
Subject: [mongodb-user] Re: Many “bad nonce received or get
nonce not called” messages in mongo log.

Reply all
Reply to author
Forward
0 new messages