MongoDB/Users - Revision history

Admin: /* Flags */

2018-11-04T20:21:58Z

Flags

← Older revision		Revision as of 20:21, 4 November 2018
Line 74:		Line 74:

	[[Category:MongoDB]]		[[Category:MongoDB]]
			[[Category:2018]]
			[[Category:February 2018]]

Admin at 20:21, 4 November 2018

2018-11-04T20:21:29Z

@@ Line 1: / Line 1: @@
 ==Create Users and Enable Authentication==
@@ Line 66: / Line 68: @@
      authorization: enabled
 </pre>

Admin: /* Create Users and Enable Authentication */

2018-11-04T12:47:31Z

Create Users and Enable Authentication

← Older revision		Revision as of 12:47, 4 November 2018
Line 28:		Line 28:

	Now you can enable client access control.		Now you can enable client access control.

			==List Users==

			Start up the mongo shell and tell it to use the admin database. Then use the <code>show users</code> command:

			<pre>
			> use admin
			> show users
			{
			"_id" : "admin.admin",
			"user" : "admin",
			"db" : "admin",
			"roles" : [
			{
			"role" : "userAdminAnyDatabase",
			"db" : "admin"
			}
			]
			}
			</pre>

			==Drop Users==

			To drop users:

			<pre>
			> db.dropUser('admin')
			true
			</pre>

	==Starting Mongo with Auth On==		==Starting Mongo with Auth On==

Admin: Created page with "==Create Users and Enable Authentication== It is a good idea to set up users and user authentication to control access to the data in the database. To create a system-wide m..."

2018-11-04T12:34:59Z

Created page with "==Create Users and Enable Authentication== It is a good idea to set up users and user authentication to control access to the data in the database. To create a system-wide m..."

New page

==Create Users and Enable Authentication==

It is a good idea to set up users and user authentication to control access to the data in the database.

To create a system-wide mongodb user admin, create a user with the role userAdminAnyDatabase (no other roles!).

Start a mongo shell using the mongo command (run this from localhost, which will not require authentication to begin with, or using --noauth flag):

<pre>
$ mongo
>
</pre>

Now you will run a few commands to create an admin user.

This creates a user "darthvader" with password "secretpass":

<pre>
> use admin
> db.createUser(
{
user: "darthvader",
pwd: "secretpass",
roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]
}
)
</pre>

Now you can enable client access control.

==Starting Mongo with Auth On==

As per the mongodb documentation [https://docs.mongodb.com/v3.0/reference/configuration-options/#security.authorization], to enable authorization you can either pass --auth when starting mongod or you can set security.authorization in the mongodb config file as follows:

<pre>
security:
authorization: enabled
</pre>