{"id":7772,"date":"2019-02-09T15:23:36","date_gmt":"2019-02-09T14:23:36","guid":{"rendered":"https:\/\/pi3g.com\/?p=7772"},"modified":"2019-02-09T15:23:36","modified_gmt":"2019-02-09T14:23:36","slug":"instructions-for-adding-a-user-to-a-mongo-database-for-mongo_orm","status":"publish","type":"post","link":"https:\/\/pi3g.com\/de\/instructions-for-adding-a-user-to-a-mongo-database-for-mongo_orm\/","title":{"rendered":"Anleitung zum Hinzuf\u00fcgen eines Benutzers zu einer Mongo-Datenbank f\u00fcr mongo_orm"},"content":{"rendered":"

You don\u2019t want your web application to access the database using your database admin user. Additionally you want it to access only one specific <\/strong>database \u2013 maybe you have additional databases running in your mongo instance. <\/p>\n

Prerequisites:<\/p>\n

mongo_orm expects the database configuration as environment variables or as a file config\/database.yml in your project.<\/p>\n

The config\/database.yml file looks like this:<\/p>\n

\n

database_url: mongodb:\/\/janet:test@hostname:27017
\ndatabase_name: dbname<\/p>\n<\/blockquote>\n

and 27017 is the default port number of mongo \u2013 if you set it to something else, change it.<\/p>\n

user is \u201cjanet\u201d<\/p>\n

and password is \u201ctest\u201d in this example. <\/p>\n

Creating a new user on the mongo instance, using the mongo console<\/h1>\n

Login to your mongo instance. Run the command mongo:<\/p>\n

\n

mongo<\/p>\n<\/blockquote>\n

(I assume that your mongo instance binds to localhost, at the default port).<\/p>\n

This will give you the mongo console. <\/p>\n

Important! you need to change to the admin database to authenticate!<\/strong><\/p>\n

\n

use admin<\/p>\n

db.auth(\u201cadmin\u201d,\u201d<adminpw>\u201d)<\/p>\n<\/blockquote>\n

change <adminpw> to the admin password you set. Please ignore WordPress\u2019 stupid habit of changing the quotation marks. These are all supposed to be normal double quotation marks<\/strong>.<\/p>\n

Important: Do not <\/strong>change the database to the target database to create the new user! Stay on the admin database!<\/font><\/p>\n

\n

db.createUser(<\/p>\n

{<\/p>\n

user: \u201cjanet\u201d,<\/p>\n

pwd: \u201ctest\u201d,<\/p>\n

roles: [{ role: \u201creadWrite\u201d, db: \u201cdbname\u201d }],<\/p>\n

passwordDigestor: \u201cserver\u201d,<\/p>\n

mechanisms: [“SCRAM-SHA-1″,”SCRAM-SHA-256”]<\/p>\n

}<\/p>\n

)<\/p>\n<\/blockquote>\n

Note: both mechanisms are required! If you just specify SCRAM-SHA-256<\/strong>, mongo orm will not be able to log in.<\/p>\n

passwordDigestor MUST be \u201cserver\u201d. It cannot <\/strong>be true. Please note, that there seems to be a difference between mongo console, and mongo API. (in the mongo API you would use digestPassword: true<\/p>\n

this will give the user janet, with the password test the readWrite role on dbname. <\/p>\n

Read more about roles here<\/a>.<\/p>\n

deleting a user<\/h1>\n
\n

use admin<\/p>\n

db.dropUser(\u201cjanet\u201d)<\/p>\n<\/blockquote>\n

Debugging<\/h1>\n

https:\/\/github.com\/Studio3T\/robomongo\/issues\/1041<\/a> <\/p>\n

Robo T3 does not seem to be able to create users properly, use my console method above.<\/p>\n

(It is, however, capable of creating databases).<\/p>\n

\"image\"<\/a><\/p>\n

as the Dialogue says, you can\u2019t use digestPassword through Robo T3 or the Mongo Console. Use passwordDigestor: \u201cserver\u201d instead. In any case, Robo T3 does not seem to be able to create the users properly \u2013 use the console.<\/p>\n

<\/p>\n

\n

db.serverStatus()<\/p>\n<\/blockquote>\n

if this command gives you:<\/p>\n

> db.serverStatus()<\/p>\n

{<\/p>\n

“ok” : 0,<\/p>\n

“errmsg” : “command serverStatus requires authentication”,<\/p>\n

“code” : 13,<\/p>\n

“codeName” : “Unauthorized”<\/p>\n

}<\/p>\n

Then you are not logged in \u2013 it will display a long list of information about your server when you are logged in.<\/p>\n

<\/p>\n

Too many users are authenticated<\/h2>\n

2019-02-09T13:53:09.972+0000 E QUERY [js] Error: couldn’t add user: too many users are authenticated<\/p>\n

_getErrorWithCode@src\/mongo\/shell\/utils.js:25:13<\/p>\n

DB.prototype.createUser@src\/mongo\/shell\/db.js:1491:15<\/a><\/p>\n

If you start to authenticate as other users to test the login, this will happen. exit from the console, log in again, and authenticate just once as admin before creating new users.<\/strong><\/p>\n

<\/p>\n

<\/p>\n

Authentication failed<\/h2>\n

Message: ‘Domain: 1, code: 11, Authentication failed.’<\/b><\/p>\n

You will get this error code from mongo orm if mongo orm can\u2019t authenticate. Resist the impulse to simply use the db as admin. Reread the information I have given here. Ensure that:<\/p>\n

    \n
  • you create the new user using the mongo console<\/li>\n
  • you have specified SCRAM-SHA-1<\/li>\n
  • the user has been created while being in the admin database (\u201cuse admin<\/strong>\u201d !!)<\/li>\n
  • you have set the roles properly<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

    Sie m\u00f6chten nicht, dass Ihre Webanwendung \u00fcber Ihren Datenbankadministrator auf die Datenbank zugreift. Au\u00dferdem wollen Sie, dass sie nur auf eine bestimmte Datenbank zugreift - vielleicht haben Sie noch weitere Datenbanken in Ihrer Mongo-Instanz laufen. Voraussetzungen: mongo_orm erwartet die Datenbankkonfiguration als Umgebungsvariablen oder als Datei config\/database.yml in Ihrem Projekt. Die config\/database.yml...<\/p>","protected":false},"author":830,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_links_to":"","_links_to_target":""},"categories":[416],"tags":[409,538,534,533],"class_list":["post-7772","post","type-post","status-publish","format-standard","hentry","category-crystal-language","tag-crystal","tag-mongo-db","tag-mongo_orm","tag-sam0x17"],"_links":{"self":[{"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/posts\/7772","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/users\/830"}],"replies":[{"embeddable":true,"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/comments?post=7772"}],"version-history":[{"count":1,"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/posts\/7772\/revisions"}],"predecessor-version":[{"id":7773,"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/posts\/7772\/revisions\/7773"}],"wp:attachment":[{"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/media?parent=7772"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/categories?post=7772"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pi3g.com\/de\/wp-json\/wp\/v2\/tags?post=7772"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}