MongoDB 7: Authentication, Connection Strings, and mongodump Backups
Enable authentication on your MongoDB service, create an application user, build the right connection string, and set up regular backups.
En esta página
Databases guías
MongoDB's most dangerous default is that authentication can be off. An internet-facing MongoDB with no password is found by scanning bots within minutes; this has been one of the most common data-breach scenarios for years. So the first thing to do is create an admin user and require authentication.
Turning on authentication#
// admin veritabanina gec
use admin
// Yonetici kullanicisi
db.createUser({
user: "yonetici",
pwd: passwordPrompt(),
roles: [{ role: "root", db: "admin" }]
})
// Uygulama icin ayri kullanici: yalnizca kendi veritabaninda yetkili
use uygulama_db
db.createUser({
user: "uygulama",
pwd: passwordPrompt(),
roles: [{ role: "readWrite", db: "uygulama_db" }]
})Building the right connection string#
# authSource, kullanicinin TANIMLANDIGI veritabanidir;
# baglanacaginiz veritabani ile ayni olmak zorunda degil.
mongodb://uygulama:[email protected]:27017/uygulama_db?authSource=uygulama_db
# Yonetici kullanicisiyla baglanirken:
mongodb://yonetici:[email protected]:27017/?authSource=adminBacking up with mongodump#
mongodump \
--uri="mongodb://uygulama:[email protected]:27017/uygulama_db?authSource=uygulama_db" \
--gzip --archive=yedek_$(date +%F).gzSolución de problemas
Authentication failed
authSource is missing, or the user was created in a different database.
Append ?authSource=<db where the user was created> to the connection string.
Server starts but I cannot connect remotely
bindIp is set to 127.0.0.1 only.
Set bindIp to 0.0.0.0 in the service configuration and make sure authentication is enabled.
¿Te ha resultado útil esta guía?
Los comentarios van directamente al equipo que mantiene esta guía.
¿No encontró una solución?
Puede abrir una solicitud al equipo de soporte desde el panel.