MongoDB 7: Authentication, Connection Strings, and mongodump Backups
Enable authentication on your MongoDB service, create an application user, build the right connection string, and set up regular backups.
Sur cette page
Databases guides
MongoDB's most dangerous default is that authentication can be off. An internet-facing MongoDB with no password is found by scanning bots within minutes; this has been one of the most common data-breach scenarios for years. So the first thing to do is create an admin user and require authentication.
Turning on authentication#
// admin veritabanina gec
use admin
// Yonetici kullanicisi
db.createUser({
user: "yonetici",
pwd: passwordPrompt(),
roles: [{ role: "root", db: "admin" }]
})
// Uygulama icin ayri kullanici: yalnizca kendi veritabaninda yetkili
use uygulama_db
db.createUser({
user: "uygulama",
pwd: passwordPrompt(),
roles: [{ role: "readWrite", db: "uygulama_db" }]
})Building the right connection string#
# authSource, kullanicinin TANIMLANDIGI veritabanidir;
# baglanacaginiz veritabani ile ayni olmak zorunda degil.
mongodb://uygulama:[email protected]:27017/uygulama_db?authSource=uygulama_db
# Yonetici kullanicisiyla baglanirken:
mongodb://yonetici:[email protected]:27017/?authSource=adminBacking up with mongodump#
mongodump \
--uri="mongodb://uygulama:[email protected]:27017/uygulama_db?authSource=uygulama_db" \
--gzip --archive=yedek_$(date +%F).gzDépannage
Authentication failed
authSource is missing, or the user was created in a different database.
Append ?authSource=<db where the user was created> to the connection string.
Server starts but I cannot connect remotely
bindIp is set to 127.0.0.1 only.
Set bindIp to 0.0.0.0 in the service configuration and make sure authentication is enabled.
Ce guide vous a-t-il été utile ?
Les retours sont directement transmis à l'équipe qui maintient ce guide.
Vous n’avez pas trouvé de solution ?
Vous pouvez ouvrir une demande auprès de notre équipe d’assistance depuis le panneau.