mongodb增加认证操作步骤

1 先用无认证的方式启动mongos

/usr/software/mongodb-linux-x86_64-rhel62-3.4.3/bin/mongos -f /usr/b2c-conf/mongos_router.yaml

/usr/software/mongodb-linux-x86_64-rhel62-3.4.3/bin/mongodb -f /usr/b2c-conf/mmongod_config.yaml

/usr/software/mongodb-linux-x86_64-rhel62-3.4.3/bin/mongodb -f /usr/b2c-conf/shard-a.yaml


2 连接到mongos的进程

/usr/software/mongodb-linux-x86_64-rhel62-3.4.3/bin/mongo --port=27017



3 创建用户管理员

use admin

use admindb.createUser(

{

user: "myUserAdmin",

pwd: "abc123",

roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]

})



4 创建test库的用户

use test

db.createUser(

{

user: "myTester",

pwd: "xyz123",

roles: [ { role: "readWrite", db: "test" },

{ role: "read", db: "reporting" } ]

})



5 在配置文件中添加认证启动方式

# On UNIX systems, the keyfile must not have group or world permissions.

# The content of the keyfile must be the same on all mongod and mongos instances



echo -e "csair mongo secret key" > /opt/mongo/keyfile



mongos配置文件增加下面配置属性：

security:

keyFile: /opt/mongo/keyfile

clusterAuthMode: "keyFile"



mongod配置文件增加下面配置属性：

security:

keyFile: /opt/mongo/keyfile

authorization: enabled



6 用认证的方式启动mongos

/usr/software/mongodb-linux-x86_64-rhel62-3.4.3/bin/mongos -f /usr/b2c-conf/mongos_router.yaml

/usr/software/mongodb-linux-x86_64-rhel62-3.4.3/bin/mongodb -f /usr/b2c-conf/mmongod_config.yaml

/usr/software/mongodb-linux-x86_64-rhel62-3.4.3/bin/mongodb -f /usr/b2c-conf/shard-a.yaml