Mongodb Security

mongodb-security.md

Mongodb Security

Enable Auth Procedure

1. Start MongoDB without access control.

   $ systemctl start mongod
   

2. Connect to the instance.

   $ mongo
   

3. Create the user administrator.

   use admin
   
   db.createUser(
     {
       user: "admin",
       pwd: "password",
       roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]
     }
   )
   

   Disconnect the mongo shell.

4. Open Mongodb with auth support .

   Edit /etc/mongod.conf

   security:
     authorization: "enabled"
   

   Restart Mongodb

   $ systemctl restart mongod
   

5. Create additional users as needed for your deployment.

   $ mongo -u admin -p password --authenticationDatabase admin
   
   use test
   
   db.createUser(
     {
       user: "myTester",
       pwd: "password",
       roles:
       [
         {
           role: "readWrite",
           db: "test"
         }
       ]
     }
   )