FrancescaK

)
> db.getSiblingDB("$external").createUser(
   {
     user: "alex@MONGOTEST.COM",
     roles: [ { role: "root", db: "admin" } ]
   }
)

FrancescaK

$ service mongod start
$ mongo
> db.getSiblingDB("$external").createUser(
    {
      user : "alex",
      roles: [ { role: "root" , db : "admin"} ]
    }
)
> db.getSiblingDB("$external").createUser(
   {

FrancescaK

$ nano /etc/selinux/config
SELINUX=disabled

FrancescaK

$ nano /etc/resolv.conf
search mongotest.com
nameserver 10.10.42.250

FrancescaK

$ nano /etc/sysconfig/network
HOSTNAME=lin-client.mongotest.com
$ reboot
$ hostname -f 
lin-client.mongotest.com

FrancescaK

javac -cp ../mongo-java-driver-2.12.1.jar SSLApp.java
java -cp .:../mongo-java-driver-2.12.1.jar -Djavax.net.ssl.trustStore=firstTrustStore -Djavax.net.ssl.trustStorePassword=changeme -Djavax.security.auth.useSubjectCredsOnly=false SSLApp

FrancescaK

keytool -importcert -file mongodb.crt -alias mongoCert -keystore firstTrustStore

FrancescaK

wget http://central.maven.org/maven2/org/mongodb/mongo-java-driver/2.12.1/mongo-java-driver-2.12.1.jar

FrancescaK

import com.mongodb.*;
import javax.net.ssl.SSLSocketFactory;
import java.util.Arrays;

public class SSLApp {
   public static void main(String args[])  throws Exception {

	        MongoClient m = new MongoClient(new MongoClientURI("mongodb://gssapitest%40MONGOTEST.COM@rhel64.mongotest.com/?authMechanism=GSSAPI&ssl=true"));

	        DB db = m.getDB( "test" );

FrancescaK

{ "_id" : "$external.gssapitest@MONGOTEST.COM", "user" : "gssapitest@MONGOTEST.COM", "db" : "$external", "credentials" : { "external" : true }, "roles" : [ { "role" : "readWrite", "db" : "test" } ] }