帮助中心/最新通知

质量为本、客户为根、勇于拼搏、务实创新

< 返回文章列表

【服务器相关】mongoDB 3.0 安全权限访问控制

发表时间:2025-06-16 03:46:00 小编:主机乐-Yutio

use admin
db.system.users.find()

{ “_id” : “admin.buru”, “user” : “buru”, “db” : “admin”, “credentials” : { “SCRAM-SHA-1” : { “iterationCount” : 10000, “salt” : “gwVwuA/dXvxgSHavEnlyvA==”, “storedKey” : “l2QEVTEujpkCuqDEKqfIWbSv4ms=”, “serverKey” : “M1ofNKXg2sNCsFrBJbX4pXbSgvg=” } }, “roles” : [ { “role” : “userAdminAnyDatabase”, “db” : “admin” } ] }
{ “_id” : “tianhe.bao”, “user” : “bao”, “db” : “tianhe”, “credentials” : { “SCRAM-SHA-1” : { “iterationCount” : 10000, “salt” : “//xy1V1fbqEHC1gzQqZHGQ==”, “storedKey” : “ZS/o54zzl/FdcXLQJ98KdAVTfF0=”, “serverKey” : “iIpNYz2Gk8KhyK3zgz6muBt0PI4=” } }, “roles” : [ { “role” : “readWrite”, “db” : “tianhe” }, { “role” : “read”, “db” : “tianhe2” } ] }


5
}

创建完毕,验证一下:


use buru
show collections

2015-03-17T10:30:06.461+0800 E QUERYError: listCollections failed: {
“ok” : 0,
“errmsg” : “not authorized on buru to execute command { listCollections: 1.0 }”,
“code” : 13
}
at Error (<anonymous>)
at DB._getCollectionInfosCommand (src/mongo/shell/db.js:643:15)
at DB.getCollectionInfos (src/mongo/shell/db.js:655:20)
at DB.getCollectionNames (src/mongo/shell/db.js:666:17)
at shellHelper.show (src/mongo/shell/utils.js:625:12)
at shellHelper (src/mongo/shell/utils.js:524:36)
at (shellhelp2):1:1 at src/mongo/shell/db.js:643


15
643

显然没权限,先auth:


db.auth(“bao”,”12345678″)
1
show collections
news
system.indexes
wahaha

6
wahaha

参考:
Mongo Shell:http://docs.mongodb.org/v2.2/tutorial/getting-started-with-the-mongo-shell
Enable Access Control:http://docs.mongodb.org/manual/tutorial/enable-authentication
Add a User to a Database:http://docs.mongodb.org/manual/tutorial/add-user-to-database
User Methods:http://docs.mongodb.org/manual/reference/method/js-user-management
Role Methods:http://docs.mongodb.org/manual/reference/method/js-role-management
mongodb 3.0 authentication:http://ibruce.info/2015/03/03/mongodb3-auth/

正在回复: 取消回复

发表评论

暂无评论
成为第一个留下见解的人

联系我们
返回顶部