Skip to content

Commit e842ee7

Browse files
committed
Add notifications for linked users
1 parent 723874e commit e842ee7

File tree

2 files changed

+111
-0
lines changed

2 files changed

+111
-0
lines changed

modules/ROOT/pages/changelogs.adoc

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,16 @@
11
:description: This page lists all changes to status codes per Neo4j version.
22
= Changes to status codes per Neo4j version
33

4+
== Neo4j 5.24
5+
6+
**New:**
7+
8+
[source, status codes, role="noheader"]
9+
-----
10+
Neo.ClientNotification.Security.AuthProviderNotDefined
11+
Neo.ClientNotification.Security.ExternalAuthNotEnabled
12+
-----
13+
414
== Neo4j 5.23
515

616
From version 5.23, Neo4j has a new GqlStatusObject API in addition to the existing Notification API.

modules/ROOT/pages/notifications/all-notifications.adoc

Lines changed: 101 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2726,6 +2726,107 @@ Use `DATABASE *` without the parameter to revoke the privilege on all databases.
27262726
======
27272727
=====
27282728

2729+
[#_neo_clientnotification_security_authprovidernotdefined]
2730+
=== AuthProviderNotDefined
2731+
2732+
.Notification details
2733+
[cols="<1s,<4"]
2734+
|===
2735+
|Code
2736+
m|Neo.ClientNotification.Security.AuthProviderNotDefined
2737+
|Title
2738+
a|The auth provider is not defined.
2739+
|Description
2740+
a|The auth provider `<provider>` is not defined in the configuration.
2741+
Verify that the spelling is correct or define `<provider>` in the configuration.
2742+
|Severity
2743+
m|INFORMATION
2744+
|Category
2745+
m|SECURITY
2746+
|===
2747+
2748+
.Create a user with an auth provider that is not defined in the configuration
2749+
====
2750+
Command::
2751+
+
2752+
[source, cypher]
2753+
----
2754+
CREATE USER foo SET AUTH 'unknownProvider' { SET ID 'idString' }
2755+
----
2756+
2757+
Description of the returned code::
2758+
The auth provider `unknownProvider` is not defined in the configuration.
2759+
Verify that the spelling is correct or define `unknownProvider` in the configuration.
2760+
2761+
Suggestions for improvement::
2762+
Make sure that the given provider is correct, or replace it if not.
2763+
If it is correct, make sure to add it as a known auth provider in one or both of `dbms.security.authentication_providers` and `dbms.security.authorization_providers`.
2764+
====
2765+
2766+
.Alter a user to add an auth provider that is not defined in the configuration
2767+
====
2768+
Command::
2769+
+
2770+
[source, cypher]
2771+
----
2772+
ALTER USER foo SET AUTH 'unknownProvider' { SET ID 'idString' }
2773+
----
2774+
2775+
Description of the returned code::
2776+
The auth provider `unknownProvider` is not defined in the configuration.
2777+
Verify that the spelling is correct or define `unknownProvider` in the configuration.
2778+
2779+
Suggestions for improvement::
2780+
Make sure that the given provider is correct, or replace it if not.
2781+
If it is correct, make sure to add it as a known auth provider in one or both of `dbms.security.authentication_providers` and `dbms.security.authorization_providers`.
2782+
====
2783+
2784+
[#_neo_clientnotification_security_externalauthnotenabled]
2785+
=== ExternalAuthNotEnabled
2786+
2787+
.Notification details
2788+
[cols="<1s,<4"]
2789+
|===
2790+
|Code
2791+
m|Neo.ClientNotification.Security.ExternalAuthNotEnabled
2792+
|Title
2793+
a|External auth for user is not enabled.
2794+
|Description
2795+
a|Use setting `dbms.security.require_local_user` to enable external auth.
2796+
|Severity
2797+
m|WARNING
2798+
|Category
2799+
m|SECURITY
2800+
|===
2801+
2802+
.Create a user with an external auth provider when linked users are not enabled
2803+
====
2804+
Command::
2805+
+
2806+
[source, cypher]
2807+
----
2808+
CREATE USER foo SET AUTH 'exampleProvider' { SET ID 'idString' }
2809+
----
2810+
2811+
Suggestions for improvement::
2812+
Enable linked users through the `dbms.security.require_local_user` setting.
2813+
Until enabled, the new external auth will be ignored, and current external auth behaviors will continue to apply.
2814+
====
2815+
2816+
.Alter a user to add an external auth provider when linked users are not enabled
2817+
====
2818+
Command::
2819+
+
2820+
[source, cypher]
2821+
----
2822+
ALTER USER foo SET AUTH 'exampleProvider' { SET ID 'idString' }
2823+
----
2824+
2825+
Suggestions for improvement::
2826+
Enable linked users through the `dbms.security.require_local_user` setting.
2827+
Until enabled, the new external auth will be ignored, and current external auth behaviors will continue to apply.
2828+
====
2829+
27292830
[#_topology_notifications]
27302831
== `TOPOLOGY` category
27312832

0 commit comments

Comments
 (0)