0

We're introducing this new password management infrastructure that changes passwords every X days, but there're these existing implementations in place that use singleton repositories, so once a connection gets established, the object stays in memory and does not have to re-authenticate/open connection next time the database access is required.

My question is, would existing open connections for users get destroyed if their password get changed?

Drivers in question are .NET and Java.

I would be surprised if connections stayed open, but would also like to know how MongoDB does cleanup of unauthorized connections and how quick can this cleanup happen after the password change.

  • 2
    Doesn’t answer your question, but It’s really frowned upon these days to use the changing of passwords as some sort of security measure. Frowned upon ... – Philᵀᴹ May 16 at 17:31
  • @Phil, I understand the benefits of such measures at certain places within organizations, but not holistically.. This has partly to do with GDRP and other privacy laws that lawmakers are pushing down... – Ostati May 16 at 19:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.