Adding Authentication to Mongo DB?

Question

Has anyone had success with adding authentication to Mongo DB? The issue that we face is related to audits. Any user on the network who installs Robo 3T can effectively open up and modify the Mongo Database on default port 27013 (I realize that we could change the port). We were not initially set up for SSL, but I am not sure that would really solve the issue.

G@G · Accepted Answer

First of all, you MUST close 27013 port in firewall, there is no need to have this open to all, of course, if syracuse is located on the same server. If Syracuse and Mongo are located on different servers, then there must be an exclusion with Syracuse server's IP. And then, I guess, the need to have any kind of authentication will be gone

Carl Herrmann · Answer

If you set up with SSL then to connect a user would need copies of the relevant certificates and to know the passphrase. If they have RDP or can browse the folders on the server this would be a moot point as they would have access to everything they would need to access the Mongo database. I agree with G@G that there should be firewall exclusions as well.

Sage X3

Adding Authentication to Mongo DB?

Top Replies

COMMUNITY

COMPANY

PARTNERS

SUPPORT & TRAINING