MongoDB3.0后的数据库安全认证
2016-04-07 10:05
706 查看
mongoDB 3.0 安全权限访问控制
MongoDB3.0权限,啥都不说了,谷歌百度出来的全是错的。先安装好盲沟,简单的没法说。首先,不使用 –auth 参数,启动 mongoDB:
mongodb-linux-i686-3.0.0/bin/mongod -f mongodb-linux-i686-3.0.0/mongodb.conf |
mongoDB 没有炒鸡无敌用户root,只有能管理用户的用户 userAdminAnyDatabase。
打开 mongo shell:
mongodb-linux-i686-3.0.0/bin/mongo |
use admin db.createUser( { user: "buru", pwd: "12345678", roles: [ { role: "userAdminAnyDatabase", db: "admin" } ] } ) |
切换到admin下,查看刚才创建的用户:
show users 或 db.system.users.find() |
{ "_id" : "admin.buru", "user" : "buru", "db" : "admin", "credentials" : { "SCRAM-SHA-1" : { "iterationCount" : 10000, "salt" : "gwVwuA/dXvxgSHavEnlyvA==", "storedKey" : "l2QEVTEujpkCuqDEKqfIWbSv4ms=", "serverKey" : "M1ofNKXg2sNCsFrBJbX4pXbSgvg=" } }, "roles" : [ { "role" : "userAdminAnyDatabase", "db" : "admin" } ] } |
下面使用 –auth 参 数,重新启动 mongoDB:
mongodb-linux-i686-3.0.0/bin/mongod --auth -f mongodb-linux-i686-3.0.0/mongodb.conf |
mongodb-linux-i686-3.0.0/bin/mongouse admin |
show collections |
2015-03-17T10:15:56.011+0800 E QUERY Error: listCollections failed: { "ok" : 0, "errmsg" : "not authorized on admin to execute command { listCollections: 1.0 }", "code" : 13 } at Error (<anonymous>) at DB._getCollectionInfosCommand (src/mongo/shell/db.js:643:15) at DB.getCollectionInfos (src/mongo/shell/db.js:655:20) at DB.getCollectionNames (src/mongo/shell/db.js:666:17) at shellHelper.show (src/mongo/shell/utils.js:625:12) at shellHelper (src/mongo/shell/utils.js:524:36) at (shellhelp2):1:1 at src/mongo/shell/db.js:643 |
下面创建用户,用户都跟着库走,创建的用户都是
use tianhe db.createUser( { user: "bao", pwd: "12345678", roles: [ { role: "readWrite", db: "tianhe" }, { role: "read", db: "tianhe2" } ] } ) |
show users { "_id" : "tianhe.bao", "user" : "bao", "db" : "tianhe", "roles" : [ { "role" : "readWrite", "db" : "tianhe" }, { "role" : "read", "db" : "tianhe2" } ] } |
use admin |
use buru |
db.auth("bao","12345678") |
参考:
Mongo Shell:http://docs.mongodb.org/v2.2/tutorial/getting-started-with-the-mongo-shell
Enable Access Control:http://docs.mongodb.org/manual/tutorial/enable-authentication
Add a User to a Database:http://docs.mongodb.org/manual/tutorial/add-user-to-database
User Methods:http://docs.mongodb.org/manual/reference/method/js-user-management
Role Methods:http://docs.mongodb.org/manual/reference/method/js-role-management
相关文章推荐
- 在Windows7下启动MongoDB服务的解决方案
- win7启动本地MongoDB的四种方式
- MongoDB的简单操作(asp.net)
- ES-MongoDB学习4_mongo-connector原理及改造
- MongoDB的简介及安装
- node.js中如何使用mongodb数据库
- MongoDB快速学习
- mongoDB window平台安装MongoDB
- MongoDB 3.0新增特性一览
- Mongodb的安装、主从配置、replicaSet配置
- mongodb高可用性架构—Replica Set
- java 中 mongodb的各种操作(二)
- mongodb安装添加服务
- MongoDB安全选项导致的“norepl”错误
- mongodb与mysql相比的优缺点
- windows版mongodb不知道安装在哪儿
- MongoDB常用命令
- Linux下MongoDB安装
- Linux下MongoDB安装和启动配置(转载)
- mongoDB添加用户