MongoDB intermediate ---- & gt; MongoDB Permissions

By default, MongoDB does not need to enter the User and password, so the client can log on. This security problem is serious.

There are also many examples on the Internet, but there are also many details that many people have not noticed me here by the way.

The following describes how to set the user name and password.

When adding a user, you must

1. If you have the relevant permissions (I will talk about it later)

2. When -- auth is not added to mongod. (If the permission is added, the following situations may occur if you add the permission)

1. > Use admin
2. Switched to db admin
3. > Db. addUser ('Sa','Sa')
4. Fri Jul 22 14:31:13 uncaught exception: error {
5. "$ Err":"Unauthorized db: admin lock type:-1 client: 127.0.0.1",
6. "Code"10057
7. }
8. >

Therefore, when adding a user, we must first add a super admin when -- auth is not added.

After the service is started, enter./mongo

1. Pai_^ [root @:/usr/local/mongodb/bin] #./mongo
2. MongoDB shell version: 1.8.2
3. Connecting to: test
4. > Use admin
5. Switched to db admin
6. > Db. adduser ('Sa','Sa')
7. Fri Jul 22 14:34:24 TypeError: db. adduser is not a function (shell): 1
8. > Db. addUser ('Sa','Sa')
9. {
10. "_ Id": ObjectId ("4e2914a585178da4e03a16c3"),
11. "User":"Sa",
12. "ReadOnly":False,
13. "Pwd":"75692b1d11c072c6c79332e248c4f699"
14. }
15. >

In this way, it indicates that the permission has been successfully created. Then, let's try the permission.

1. > Show collections
2. System. indexes
3. System. users

Without -- auth, you can access admin's two favorite default tables.

1. > Db. system. users. find ()

1. {"_ Id": ObjectId ("4e2914a585178da4e03a16c3"),"User":"Sa","ReadOnly":False,"Pwd":"75692b1d11c072c6c79332e248c4f699"}>

Created successfully.

Add the -- auth option to the service.

Go to./mongo.

1. MongoDB shell version: 1.8.2
2. Connecting to: test
3. > Use admin
4. Switched to db admin
5. > Show collections
6. Fri Jul 22 14:38:49 uncaught exception: error :{
7. "$ Err":"Unauthorized db: admin lock type:-1 client: 127.0.0.1",
8. "Code"10057
9. }
10. >

You can see that you have no access permission.

1 2 Next Page