MongoDB开启身份认证

首先在admin库中创建admin管理员

mongo


MongoDB shell version v3.4.18
connecting to: mongodb://127.0.0.1:27017
MongoDB server version: 3.4.18
Server has startup warnings: 
2019-01-22T10:04:20.610+0800 I STORAGE  [initandlisten] 
2019-01-22T10:04:20.610+0800 I STORAGE  [initandlisten] ** WARNING: Using the XFS filesystem is strongly recommended with the WiredTiger storage engine
2019-01-22T10:04:20.611+0800 I STORAGE  [initandlisten] **          See http://dochub.mongodb.org/core/prodnotes-filesystem
2019-01-22T10:04:20.751+0800 I CONTROL  [initandlisten] 
2019-01-22T10:04:20.751+0800 I CONTROL  [initandlisten] ** WARNING: Access control is not enabled for the database.
2019-01-22T10:04:20.751+0800 I CONTROL  [initandlisten] **          Read and write access to data and configuration is unrestricted.
2019-01-22T10:04:20.751+0800 I CONTROL  [initandlisten] 
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] 
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] ** WARNING: /sys/kernel/mm/transparent_hugepage/enabled is 'always'.
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] **        We suggest setting it to 'never'
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] 
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] ** WARNING: /sys/kernel/mm/transparent_hugepage/defrag is 'always'.
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] **        We suggest setting it to 'never'
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] 
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] ** WARNING: soft rlimits too low. rlimits set to 1024 processes, 64000 files. Number of processes should be at least 32000 : 0.5 times number of files.
2019-01-22T10:04:20.752+0800 I CONTROL  [initandlisten] 
> show dbs;
admin  0.000GB
local  0.000GB
> use admin
switched to db admin
> db.createUser({user:"admin",pwd:"admin",roles:[{role:"root",db:"admin"}]})
Successfully added user: {
	"user" : "admin",
	"roles" : [
		{
			"role" : "root",
			"db" : "admin"
		}
	]
}
> ^C
bye

修改mongod.conf文件,开启权限检查

sudo vi/etc/mongodconf

 
     26 # network interfaces
     27 net:
     28   port: 27017
     29  # bindIp: 127.0.0.1  # Listen to local interface only, comment to listen on all interfaces.
     30 
     31 
     32 security:
     33   authorization: enabled  #冒号后面有一个空格 行前缩进两个字符
     34 #operationProfiling:
     35 
     36 #replication:

保存并重启mongod服务

sudo service mongod restart