DOCSP-37082 Adds setAt text to Authentication Parameters (#6921) (#7005)

* DOCSP-37082 SetAt for Auth Parameters

* Parameter updates

* Parameter updates

* Parameter updates

Author: kennethdyer

source/reference/parameters.txt

@@ -73,8 +73,7 @@ Authentication Parameters
 
    .. include:: /includes/list-table-auth-mechanisms.rst
 
-   You can only set :parameter:`authenticationMechanisms` during
-   start-up.
+   .. include:: /includes/fact-startup-parameter
 
    For example, to specify both ``PLAIN`` and ``SCRAM-SHA-256`` as the
    authentication mechanisms, use the following command:
@@ -130,6 +129,8 @@ Authentication Parameters
 
    .. include:: /includes/extracts/ssl-facts-see-more.rst
 
+   .. include:: /includes/fact-runtime-parameter
+
    .. code-block:: bash
 
       db.adminCommand( { setParameter: 1, clusterAuthMode: "sendX509" } )
@@ -141,11 +142,7 @@ Authentication Parameters
    Specify ``0`` or ``false`` to disable localhost authentication
    bypass. Enabled by default.
 
-   :parameter:`enableLocalhostAuthBypass` is not available using
-   :dbcommand:`setParameter` database command. Use the
-   :setting:`setParameter` option in the configuration file or the
-   :option:`--setParameter <mongod --setParameter>` option on the
-   command line.
+   .. include:: /includes/fact-startup-parameter
 
    See :ref:`localhost-exception` for more information.
 
@@ -158,9 +155,7 @@ Authentication Parameters
    is valid before rotating to the next one. This parameter is intended
    primarily to facilitate authentication testing.
 
-   You can only set :parameter:`KeysRotationIntervalSec` during
-   start-up, and cannot change this setting with the
-   :dbcommand:`setParameter` database command.
+   .. include:: /includes/fact-startup-parameter
 
 .. parameter:: ldapForceMultiThreadMode
 
@@ -489,9 +484,7 @@ Authentication Parameters
    :dbcommand:`validate` returns as many results as possible and warns
    that not all corruption might be reported because of the limit.
 
-   You can set :parameter:`maxValidateMemoryUsageMB` during startup, and
-   can change this setting using the :dbcommand:`setParameter` database
-   command.
+   .. include:: /includes/fact-runtime-startup-parameter
 
 .. parameter:: oidcIdentityProviders
 
@@ -511,9 +504,7 @@ Authentication Parameters
 
    .. include:: /includes/fact-oidc-providers.rst
 
-   You can only set ``oidcIdentityProviders`` during startup in the
-   :setting:`configuration file <setParameter>` or with the
-   ``--setParameter`` option on the command line. 
+   .. include:: /includes/fact-startup-parameter
 
 .. parameter:: ocspEnabled
 
@@ -523,10 +514,9 @@ Authentication Parameters
 
    The flag that enables or disables OCSP.
 
-   You can only set :parameter:`ocspEnabled` during startup in the
-   :setting:`configuration file <setParameter>` or with the
-   ``--setParameter`` option on the command line. For example, the
-   following disables OCSP:
+   .. include:: /includes/fact-startup-parameter
+
+   For example, the following disables OCSP:
 
    .. code-block:: bash
 
@@ -585,9 +575,7 @@ Authentication Parameters
       cipher suites for use with TLS 1.3, use the
       :parameter:`opensslCipherSuiteConfig` parameter.
 
-   You can only set :parameter:`opensslCipherConfig` during start-up,
-   and cannot change this setting using the :dbcommand:`setParameter`
-   database command.
+   .. include:: /includes/fact-startup-parameter
 
    For version 4.2 and greater, the use of ``TLS`` options is preferred
    over ``SSL`` options. The TLS options have the same functionality as
@@ -618,11 +606,10 @@ Authentication Parameters
       strings for use with TLS 1.2 or earlier, use the
       :parameter:`opensslCipherConfig` parameter.
 
-   You can only set :parameter:`opensslCipherSuiteConfig` during
-   start-up, and cannot change this setting using the
-   :dbcommand:`setParameter` database command. For example, the
-   following configures a :binary:`~bin.mongod` with a
-   :parameter:`opensslCipherSuiteConfig` cipher suite of
+   .. include:: /includes/fact-startup-parameter
+
+   For example, the following configures a :binary:`~bin.mongod`
+   with a :parameter:`opensslCipherSuiteConfig` cipher suite of
    ``'TLS_AES_256_GCM_SHA384'`` for use with TLS 1.3:
 
    .. code-block:: bash
@@ -659,9 +646,7 @@ Authentication Parameters
       not supported with Java 6 and 7 unless extended support has been
       purchased from Oracle.
 
-   You can only set :parameter:`opensslDiffieHellmanParameters` during
-   startup, and cannot change this setting using the
-   :dbcommand:`setParameter` database command.
+   .. include:: /includes/fact-startup-parameter
 
    If for performance reasons, you need to disable support for DHE
    cipher suites, use the :parameter:`opensslCipherConfig` parameter:
@@ -679,6 +664,8 @@ Authentication Parameters
    Specify the path to the Unix Domain Socket of the ``saslauthd``
    instance to use for proxy authentication.
 
+   .. include:: /includes/fact-startup-parameter
+
 .. parameter:: saslHostName
 
    |both|
@@ -691,9 +678,7 @@ Authentication Parameters
    :binary:`~bin.mongod` or :binary:`~bin.mongos` instance for any purpose
    beyond the configuration of SASL and Kerberos.
 
-   You can only set :parameter:`saslHostName` during start-up, and
-   cannot change this setting using the :dbcommand:`setParameter`
-   database command.
+   .. include:: /includes/fact-startup-parameter
 
    .. note::
 
@@ -717,9 +702,7 @@ Authentication Parameters
    principal name, on a per-instance basis. If unspecified, the
    default value is ``mongodb``.
 
-   MongoDB only permits setting :parameter:`saslServiceName` at
-   startup. The :dbcommand:`setParameter` command can not change
-   this setting.
+   .. include:: /includes/fact-startup-parameter
 
    :parameter:`saslServiceName` is only available in MongoDB
    Enterprise.
@@ -744,6 +727,8 @@ Authentication Parameters
    existing passwords. The :parameter:`scramIterationCount` value must
    be ``5000`` or greater.
 
+   .. include:: /includes/fact-runtime-startup-parameter
+
    For example, the following sets the :parameter:`scramIterationCount`
    to ``12000``.
 
@@ -780,6 +765,8 @@ Authentication Parameters
    existing passwords. The :parameter:`scramSHA256IterationCount` value
    must be ``5000`` or greater.
 
+   .. include:: /includes/fact-runtime-startup-parameter
+
    For example, the following sets the :parameter:`scramSHA256IterationCount`
    to ``20000``.
 
@@ -810,6 +797,8 @@ Authentication Parameters
 
    .. include:: /includes/extracts/ssl-facts-see-more.rst
 
+   .. include:: /includes/fact-runtime-parameter
+
    .. code-block:: bash
 
       db.adminCommand( { setParameter: 1, sslMode: "preferSSL" } )
@@ -834,6 +823,8 @@ Authentication Parameters
    upgrade to TLS/SSL </tutorial/upgrade-cluster-to-ssl>` to minimize
    downtime.
 
+   .. include:: /includes/fact-runtime-parameter
+
    .. code-block:: bash
 
       db.adminCommand( { setParameter: 1, tlsMode: "preferTLS" } )
@@ -862,6 +853,8 @@ Authentication Parameters
    Use this parameter to rotate certificates when the new certificates have
    different attributes or extension values.
 
+   .. include:: /includes/fact-startup-parameter
+
 .. parameter:: tlsOCSPStaplingTimeoutSecs
 
    Available for Linux.
@@ -874,11 +867,10 @@ Authentication Parameters
    :parameter:`tlsOCSPStaplingTimeoutSecs` uses the
    :parameter:`tlsOCSPVerifyTimeoutSecs` value.
 
-   You can only set :parameter:`tlsOCSPStaplingTimeoutSecs` during
-   startup in the :setting:`configuration file <setParameter>` or with
-   the ``--setParameter`` option on the command line. For example, the
-   following sets the :parameter:`tlsOCSPStaplingTimeoutSecs` to 20
-   seconds:
+   .. include:: /includes/fact-startup-parameter
+
+   For example, the following sets the
+   :parameter:`tlsOCSPStaplingTimeoutSecs` to 20 seconds:
 
    .. code-block:: bash
 
@@ -902,11 +894,10 @@ Authentication Parameters
 
    Specify an integer greater than or equal to (``>=``) 1.
 
-   You can only set :parameter:`tlsOCSPVerifyTimeoutSecs` during
-   startup in the :setting:`configuration file <setParameter>` or with
-   the ``--setParameter`` option on the command line. For example, the
-   following sets the :parameter:`tlsOCSPVerifyTimeoutSecs` to 20
-   seconds:
+   .. include:: /includes/fact-startup-parameter
+
+   For example, the following sets the
+   :parameter:`tlsOCSPVerifyTimeoutSecs` to 20 seconds:
 
    .. code-block:: bash
 
@@ -933,10 +924,9 @@ Authentication Parameters
 
       .. include:: /includes/fact-ssl-tlsCAFile-tlsUseSystemCA.rst
 
-   You can set ``tlsUseSystemCA`` only during startup in the 
-   :setting:`configuration file <setParameter>` or with the ``--setParameter`` 
-   option on the command line. For example, to set ``tlsUseSystemCA`` to 
-   ``true``: 
+   .. include:: /includes/fact-startup-parameter
+
+   For example, to set ``tlsUseSystemCA`` to ``true``: 
 
    .. code-block:: bash 
 
@@ -968,6 +958,8 @@ Authentication Parameters
    deployment. ``tlsWithholdClientCertificate`` is mutually exclusive with
    :option:`--clusterAuthMode x509 <mongod --clusterAuthMode>`.
 
+   .. include:: /includes/fact-startup-parameter
+
 .. parameter:: tlsX509ClusterAuthDNOverride
 
    .. versionadded:: 4.2
@@ -1002,6 +994,8 @@ Authentication Parameters
       If set, you must set this parameter on all members of the
       deployment.
 
+   .. include:: /includes/fact-runtime-startup-parameter
+
    You can use this parameter for a rolling update of certificates to
    new certificates that contain a new ``DN`` value. See
    :doc:`/tutorial/rotate-x509-membership-certificates`.
@@ -1031,14 +1025,7 @@ Authentication Parameters
 
    This parameter has a minimum value of ``0``.
 
-   You can only set :parameter:`tlsX509ExpirationWarningThresholdDays`
-   during ``mongod/mongos`` startup using either:
-
-   - The :setting:`setParameter` configuration setting, *or*
-
-   - The :option:`mongod --setParameter <mongod --setParameter>` /
-     :option:`mongos --setParameter <mongos --setParameter>` command
-     line option.
+   .. include:: /includes/fact-startup-parameter
 
    See :ref:`4.4-rel-notes-certificate-expiration-warning` for more
    information on x.509 expiration warnings.
@@ -1088,6 +1075,8 @@ Authentication Parameters
    This parameter has a minimum value of ``1`` second and a maximum
    value of ``86400`` seconds (24 hours).
 
+   .. include:: /includes/fact-runtime-startup-parameter
+
 .. parameter:: authFailedDelayMs
 
    |both|
@@ -1115,8 +1104,7 @@ Authentication Parameters
    A boolean flag that allows or disallows the retrieval of
    authorization roles from client x.509 certificates.
 
-   You can only set :parameter:`allowRolesFromX509Certificates` during
-   startup in the config file or on the command line.
+   .. include:: /includes/fact-startup-parameter
 
 General Parameters
 ~~~~~~~~~~~~~~~~~~