MongoDB和Java（7）：MongoDB用戶管理

 1 [root@xugf-test4 ~]# mongo
 2 > use admin
 3 switched to db admin
 4 > db.createUser({
 5 ... user: "admin",
 6 ... pwd: "123456",
 7 ... roles: [{role: "root", db: "admin"}],
 8 ... mechanisms: ["SCRAM-SHA-1"]
 9 ... })
10 Successfully added user: {
11         "user" : "admin",
12         "roles" : [
13                 {
14                         "role" : "root",
15                         "db" : "admin"
16                 }
17         ],
18         "mechanisms" : [
19                 "SCRAM-SHA-1"
20         ]
21 }

修改mongo.conf配置文件，開啓權限認證功能，auth屬性設置true

1 [mongo@xugf-test4 ~]$ cat /etc/mongo.conf 
2 dbpath=/data/mongo/db/
3 logpath=/data/mongo/log/mongodb.log
4 bind_ip_all=true
5 fork=true
6 auth=true

重啓mongodb

三、身份認證的兩種方式

再使用mongo鏈接，進行操做時會提示未認證

 1 [root@xugf-test4 ~]# mongo
 2 > show dbs
 3 2018-10-12T10:16:00.683+0800 E QUERY    [js] Error: listDatabases failed:{
 4         "ok" : 0,
 5         "errmsg" : "command listDatabases requires authentication",
 6         "code" : 13,
 7         "codeName" : "Unauthorized"
 8 } :
 9 _getErrorWithCode@src/mongo/shell/utils.js:25:13
10 Mongo.prototype.getDBs@src/mongo/shell/mongo.js:67:1
11 shellHelper.show@src/mongo/shell/utils.js:876:19
12 shellHelper@src/mongo/shell/utils.js:766:15
13 @(shellhelp2):1:1

此時，有兩種方式進行客戶端認證：
1）在鏈接時使用--authenticationDatabase選項指定認證數據庫，使用-u選項指定用戶名，使用-p指定密碼

1 [root@xugf-test4 ~]# mongo -u admin -p --authenticationDatabase admin
2 MongoDB shell version v4.0.2
3 Enter password:
4 MongoDB server version: 4.0.2
5 > show dbs
6 admin   0.000GB
7 config  0.000GB
8 local   0.000GB

2）在鏈接後切換到認證數據庫後，使用db.auth("username", "password")進行認證

 1 [root@xugf-test4 ~]# mongo
 2 MongoDB shell version v4.0.2
 3 connecting to: mongodb://127.0.0.1:27017
 4 MongoDB server version: 4.0.2
 5 > use admin
 6 switched to db admin
 7 > db.auth("admin", "123456")
 8 1
 9 > show dbs
10 admin   0.000GB
11 config  0.000GB
12 local   0.000GB

四、添加數據庫管理員

給test庫添加一個數據庫管理員testAdmin

 1 > use test
 2 switched to db test
 3 > db.createUser({
 4 ... user: "testAdmin",
 5 ... pwd: "123456",
 6 ... roles: [{role: "dbOwner", db: "test"}],
 7 ... mechanisms: ["SCRAM-SHA-1"]
 8 ... })
 9 Successfully added user: {
10         "user" : "testAdmin",
11         "roles" : [
12                 {
13                         "role" : "dbOwner",
14                         "db" : "test"
15                 }
16         ],
17         "mechanisms" : [
18                 "SCRAM-SHA-1"
19         ]
20 }

使用testAdmin鏈接

 1 [root@xugf-test4 ~]# mongo -u testAdmin -p --authenticationDatabase test
 2 > db
 3 test
 4 > db.getUsers()
 5 [
 6         {
 7                 "_id" : "test.testAdmin",
 8                 "user" : "testAdmin",
 9                 "db" : "test",
10                 "roles" : [
11                         {
12                                 "role" : "dbOwner",
13                                 "db" : "test"
14                         }
15                 ],
16                 "mechanisms" : [
17                         "SCRAM-SHA-1"
18                 ]
19         }
20 ]

五、添加數據庫讀寫用戶

給test庫添加一個xugf用戶

 1 > use test
 2 switched to db test
 3 > db.createUser({
 4 ... user: "xugf",
 5 ... pwd: "123456",
 6 ... roles: [{role: "readWrite", db: "test"}],
 7 ... mechanisms: ["SCRAM-SHA-1"]
 8 ... })
 9 Successfully added user: {
10         "user" : "xugf",
11         "roles" : [
12                 {
13                         "role" : "readWrite",
14                         "db" : "test"
15                 }
16         ],
17         "mechanisms" : [
18                 "SCRAM-SHA-1"
19         ]
20 }

使用xugf鏈接

1 [root@xugf-test4 ~]# mongo -u xugf -p 123456 --authenticationDatabase test
2 MongoDB shell version v4.0.2
3 connecting to: mongodb://127.0.0.1:27017
4 MongoDB server version: 4.0.2
5 >
6 > db
7 test