Add support for SCRAM-SHA-256 authentication

[ngalantowicz]

Is your feature request related to a problem? Please describe.

Integration fails due to no mongo 4+ SCRAM-SHA-256 authentication support. I've found that the driver you all use has yet to enable support for SCRAM-SHA-256 authentication as well. There's an existing pr (stale - 2+ years old) in the driver repo you all use. I understand that this will need to be done first in order to enable here, so I'm curious and asking if the mgo feature is completed would you all be willing to support it.

Feature Description

Enable mongo 4+ SCRAM-SHA-256 authentication mechanism

Describe Alternatives

n/a

Additional context

Existing mgo pr seeking support for completion

Priority

Blocker

[ngalantowicz]

My bad I didn't mean to close got a little trigger happy :)

[gsanchezgavier]

Hi @ngalantowicz , this really looks interesting i have tagged this issue to be prioritized by our PM.

[roobre]

Hi,

We are currently using the mgo driver which, to our knowledge, is now kind of in a "maintenance mode", and it's hard to get new features added to it, so I wouldn't be too optimistic regarding that PR getting merged.

We have talked a couple times about migrating to the official mongo driver, and this could be something to weight in for that. Are you aware if the official driver supports SCRAM?

[ngalantowicz]

@gsanchezgavier and @roobre thanks for taking an interest in this feature.

The official mongo driver does support SCRAM

https://github.com/mongodb/mongo-go-driver/blob/master/mongo/options/clientoptions.go#L45-#L46

[roobre]

@ngalantowicz Thanks for the confirmation! We'll add this to the list of things to track for the migration :)

[paologallinaharbur]

Same applies for SCRAM-SHA-1 blocked by #71

[Neustradamus]

@ all: I wish you a Happy New Year 2022!

Any news about it?

Linked to:

• State of Play scram-sasl/info#1

[pyrotechnics-io]

Incidentally, I'm working on a fork which essentially removes globalsign/mgo in favour of the mongodb official driver here : https://github.com/pyrotechnics-io/nri-mongodb/tree/hbaste-scramsha256. This would at least in theory allow it to be used for SCRAM-SHA-256 as well as MongoDB 5 (has undergone some very basic testing against 4.4 with SCRAM-SHA-256). The approach followed is to mimick the interface of mgo as used in the code with a facade wrapper and then eventually refactor and do away with the wrapper altogether. A lot of the test code had deep hooks into mgo objects unfortunately so had to temporarily disable several of them.

Disclaimer: Its still a pre-alpha wip but any help testing it is much appreciated.

[pyrotechnics-io]

Just fyi but if testing is validated, the fork above in theory should address #67, #70, #71, #76, #78

[workato-integration]

https://issues.newrelic.com/browse/NEWRELIC-4308

[mangulonr]

Hi

The new MongoDB OHI has been released in public preview, this version will be GA during June.

Some of the new features provided:

• Compatibility with MongoDB Atlas.
• Support of the latest major MongoDB versions 5 and 6.
• Compatibility with Percona Server for MongoDB.
• Support of SCRAM authentication.
• Integration with the entity explorer thanks to 3 new entity types (MongoDB instance, database, and collection).
• Improved new MongoDB quickstart.
• Improved metrics filtering capabilities.

For more information check the following resources.

• Documentation
• Migration guide
• Quickstart

Because it is based on Prometheus the metric names are different from our legacy OHI, check our migration guide if you need more details.
Our legacy MongoDB OHI will be deprecated on FY24H2 (final date pending to be decided).

[workato-integration]

Work has been completed on this issue.