How disable anonymous access to MongoDB OR Enable Client Access Control in MongoDB.

Securing MongoDB with Authentication and Authorization:

Step 1) Login using shell and Create an admin account:

Open terminal and login using below command> 

mongo

 Switch to admin db using below command>

use admin;
 
 Create Admin user using below command>

db.createUser({
  user : "admin",
  pwd  : "pass",
  roles: [
    { 
      role: 'root', db: 'admin'
    }
  ]
});
 
Now Give grand Roles to Admin User using below command: 

db.grantRolesToUser(
    "admin",
    [{ "role" : "readWriteAnyDatabase", "db" : "admin" },{ role: "userAdminAnyDatabase", db: "admin" }]
)

Step 2) Test your admin account using below command>

mongo -u admin -p pass --authenticationDatabase admin
 
Step 4) Force authorization 

FOR MONGODB 3.0 AND ABOVE add these lines in /etc/mongod.conf>

 security:
  authorization: enabled

FOR MONGODB 2.X add this line> 

auth = true

 
Any changes to your config file require a restart before they will take effect>

sudo service mongod restart
 
 

 
Enjoy ........

  

Comments

Popular posts from this blog

How to run ofbiz as ubuntu Service.

JPA vs Spring JPA vs Spring Data JPA vs Hibernate

Java Array Interview Questions for Entry-Level Developers Part 01