I am using Ubuntu & I already have mongodb installed with default setting.
To login to mongo shell I usually run
mongosh
command without any username ot password.Now we will make changes so that
useranme & password become essential to login to mongo-shell.
For that purpose first login to mongodb simply by calling
mongosh
In shell run
use admin;
List users using
show users;
Output:
[
{
_id: 'admin.dev',
userId: UUID('1cbde7e7-8e19-45c9-87b8-7fa9e4679cbd'),
user: 'dev',
db: 'admin',
roles: [
{ role: 'userAdminAnyDatabase', db: 'admin' },
{ role: 'readWriteAnyDatabase', db: 'admin' }
],
mechanisms: [ 'SCRAM-SHA-1', 'SCRAM-SHA-256' ]
},
{
_id: 'admin.root',
userId: UUID('e9470ae4-18c5-42e4-9b47-ba9b3396fb98'),
user: 'root',
db: 'admin',
roles: [
{ role: 'readWriteAnyDatabase', db: 'admin' },
{ role: 'userAdminAnyDatabase', db: 'admin' }
],
mechanisms: [ 'SCRAM-SHA-1', 'SCRAM-SHA-256' ]
}
]
Note:Your Output may vary.
Here there is no custom user defined.we will defined one named "sangram" in it.
to create user with password run following query:
db.createUser(
{
user: "sangram",
pwd: "sangram#81",
roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]
}
);
please change name of user (user) & password (pwd) as per your choice
Now to grant access to user "sangram" to say "phenixDb" database.In
admin database only run following query.
db.grantRolesToUser(
"sangram",
[
{ role: "readWrite", db: "phenixDb" }, // Read and write access
{ role: "dbAdmin", db: "phenixDb" } // Database admin access
]
);
Then open configuration file "/etc/mongod.conf" as follows
sudo nano /etc/mongod.conf
search for word "security"
change
autorization:"disabled"
to
autorization:"enabled"
don't forgot to uncomment security by removing # before it if any,
It should look as follows
security:
authorization: "enabled"
Save file.
Restart mongodb service as follows
sudo systemctl restart mongod
You can check status of mongod service as
sudo systemctl status mongod
Now you can connect to mongodb using username & password as follows
mongosh --port 27017 -u "sangram" -p "sangram#81"
--authenticationDatabase "admin"
In my case it login into database "test" after running this command.
