mongodb分片环境开启认证

1.生成keyfile

openssl rand -base64 741 > /var/mongo/mongodb-keyfile

chmod 600 mongodb-keyfile

2.把keyfile copy到其他节点并修改权限

3.修改配置文件

添加：

keyFile=/var/mongo/mongodb-keyfile

4.重新启动mongodb使认证生效

use admin

db.shutdownServer()

5.连接到mongos 添加用户

use admin

db.createUser(

{

user: "myUserAdmin",

pwd: "root001",

roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]

}

)

db.createUser( {

user: "siteRootAdmin",

pwd: "root001",

roles: [ { role: "root", db: "admin" } ]

});

创建用户报错

mongos> db.createUser(

... {

... user: "myUserAdmin",

... pwd: "root001",

... roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]

... }

... )

2016-02-29T10:58:31.051+0800 E QUERY [thread1] Error: couldn't add user: clock skew of the cluster 192.168.1.74:50000,192.168.1.69:50000,192.168.1.63:50000 is too far out of bounds to allow distributed locking. :

_getErrorWithCode@src/mongo/shell/utils.js:23:13

DB.prototype.createUser@src/mongo/shell/db.js:1225:11

@(shell):1:1

原因是由于各个节点时间不一致导致的，开启服务器的ntp服务同步时间

ntpdate -u 0.centos.pool.ntp.org

时间一致后再次创建用户，问题解决

创建特定数据库的用户

db.createUser(

{

user: "productsDBAdmin",

pwd: "password",

roles:

[

{

role: "dbOwner",

db: "wangwei"

}

]

}

)

认证

db.auth("productsDBAdmin","password")