最新消息：20210816 当前crifan.com域名已被污染，为防止失联，请关注（页面右下角的）公众号
    你的位置：在路上 > 权限 > 【已解决】本地mongo shell中连接远程加了权限控制的mongoDB

    【已解决】本地mongo shell中连接远程加了权限控制的mongoDB

    权限 crifan 1564浏览 0评论
    折腾：
    【已解决】PyCharm连接远程添加security的authorization的MongoDB出错：com.mongodb.MongoCommandExceptions: Command failed with error 13
    期间，去试试Mac中mongo命令行是否成功
    果然还是不成功：
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    ➜  ~ mongo --host xxx -u gridfs -p pwd --authenticationDatabase gridfs
    MongoDB shell version v3.6.3
    connecting to: mongodb://xxx:27017/
    MongoDB server version: 3.2.19
    WARNING: shell and server versions do not match
    > show users
    2018-04-08T11:46:44.754+0800 E QUERY    [thread1] Error: not authorized on test to execute command { usersInfo: 1.0 } :
    _getErrorWithCode@src/mongo/shell/utils.js:25:13
    DB.prototype.getUsers@src/mongo/shell/db.js:1686:1
    shellHelper.show@src/mongo/shell/utils.js:799:9
    shellHelper@src/mongo/shell/utils.js:706:15
    @(shellhelp2):1:1
    > show dbs
    2018-04-08T11:46:50.765+0800 E QUERY    [thread1] Error: listDatabases failed:{
        "ok" : 0,
        "errmsg" : "not authorized on admin to execute command { listDatabases: 1.0 }",
        "code" : 13
    } :
    _getErrorWithCode@src/mongo/shell/utils.js:25:13
    Mongo.prototype.getDBs@src/mongo/shell/mongo.js:65:1
    shellHelper.show@src/mongo/shell/utils.js:816:19
    shellHelper@src/mongo/shell/utils.js:706:15
    @(shellhelp2):1:1
    > quit()
    ➜  ~
    ➜  ~ mongo --host xxx -u gridfs -p pwd --authenticationDatabase gridfs
    ➜  ~ mongo --host xxx -u "gridfs" -p "pwd" --authenticationDatabase "gridfs"
    MongoDB shell version v3.6.3
    connecting to: mongodb://xxx:27017/
    MongoDB server version: 3.2.19
    WARNING: shell and server versions do not match
    > show dbs
    2018-04-08T11:47:55.529+0800 E QUERY    [thread1] Error: listDatabases failed:{
        "ok" : 0,
        "errmsg" : "not authorized on admin to execute command { listDatabases: 1.0 }",
        "code" : 13
    } :
    _getErrorWithCode@src/mongo/shell/utils.js:25:13
    Mongo.prototype.getDBs@src/mongo/shell/mongo.js:65:1
    shellHelper.show@src/mongo/shell/utils.js:816:19
    shellHelper@src/mongo/shell/utils.js:706:15
    @(shellhelp2):1:1
    > db.fs.findOne()
    2018-04-08T11:48:03.968+0800 E QUERY    [thread1] Error: error: {
        "ok" : 0,
        "errmsg" : "not authorized on test to execute command { find: \"fs\", filter: {}, limit: 1.0, singleBatch: true }",
        "code" : 13
    } :
    _getErrorWithCode@src/mongo/shell/utils.js:25:13
    DBCommandCursor@src/mongo/shell/query.js:717:1
    DBQuery.prototype._exec@src/mongo/shell/query.js:117:28
    DBQuery.prototype.hasNext@src/mongo/shell/query.js:288:5
    DBCollection.prototype.findOne@src/mongo/shell/collection.js:258:10
    @(shell):1:1
    > db.auth("gridfs", "pwd")
    Error: Authentication failed.
    0
    所以还是服务器端，再进去，重新确认，在开启授权之前所创建的gridfs用户，是否存在
    发现用户是存在的啊：
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    [root@xxx-general-01 ~]# mongo -u admin -p pwd --authenticationDatabase admin
    MongoDB shell version: 3.2.19
    connecting to: test
    > show dbs
    admin   0.000GB
    gridfs  4.539GB
    local   0.000GB
    > use admin
    switched to db admin
    > show users
    {
            "_id" : "admin.admin",
            "user" : "admin",
            "db" : "admin",
            "roles" : [
                    {
                            "role" : "userAdminAnyDatabase",
                            "db" : "admin"
                    }
            ]
    }
    > use gridfs
    switched to db gridfs
    > show users
    {
            "_id" : "gridfs.gridfs",
            "user" : "gridfs",
            "db" : "gridfs",
            "roles" : [
                    {
                            "role" : "dbOwner",
                            "db" : "gridfs"
                    }
            ]
    }
    >
    难道是MongoDB 数据库版本不兼容？？？
    mongodb Error: Authentication failed
    authorization – MongoDB 3.2 authentication failed – Stack Overflow
    也说是
    创建了，具有用户管理权限的，root，用户后，再去重启开启限制，然后用root用户去创建其他用户
    那就去：
    服务器端，mongo shell中，在已经开启权限的情况下，先删除之前的gridfs用户
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    > use gridfs
    switched to db gridfs
    > show users
    {
            "_id" : "gridfs.gridfs",
            "user" : "gridfs",
            "db" : "gridfs",
            "roles" : [
                    {
                            "role" : "dbOwner",
                            "db" : "gridfs"
                    }
            ]
    }
    > db.runCommand({dropAllUsersFromDatabase: 1})
    { "n" : 1, "ok" : 1 }
    > show users
    然后再去重新像之前一样，创建该用户：
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    > use gridfs
    switched to db gridfs
    > show users
    > db.createUser(
    ...   {
    ...     user: "gridfs",
    ...     pwd: "pwd",
    ...     roles: [ { role: "dbOwner", db: "gridfs" } ]
    ...   }
    ... )
    Successfully added user: {
            "user" : "gridfs",
            "roles" : [
                    {
                            "role" : "dbOwner",
                            "db" : "gridfs"
                    }
            ]
    }
    > show users
    {
            "_id" : "gridfs.gridfs",
            "user" : "gridfs",
            "db" : "gridfs",
            "roles" : [
                    {
                            "role" : "dbOwner",
                            "db" : "gridfs"
                    }
            ]
    }
    然后，再去Mac本地mongo shell中再去连接试试，看看是否有权限操作gridfs数据库了。
    后来发现，好像是之前缺少 use gridfs，此处加上了，至少可以就可以find到文件了：
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    ➜  ~ mongo --host xxx -u gridfs -p pwd --authenticationDatabase gridfs
    MongoDB shell version v3.6.3
    connecting to: mongodb://xxx:27017/
    MongoDB server version: 3.2.19
    WARNING: shell and server versions do not match
    > show users
    2018-04-08T11:57:53.052+0800 E QUERY    [thread1] Error: not authorized on test to execute command { usersInfo: 1.0 } :
    _getErrorWithCode@src/mongo/shell/utils.js:25:13
    DB.prototype.getUsers@src/mongo/shell/db.js:1686:1
    shellHelper.show@src/mongo/shell/utils.js:799:9
    shellHelper@src/mongo/shell/utils.js:706:15
    @(shellhelp2):1:1
    > use gridfs
    switched to db gridfs
    > show users
    {
        "_id" : "gridfs.gridfs",
        "user" : "gridfs",
        "db" : "gridfs",
        "roles" : [
            {
                "role" : "dbOwner",
                "db" : "gridfs"
            }
        ]
    }
    > db.fs.findOne()
    null
    > db.fs.files.findOne()
    {
        "_id" : ObjectId("5ac48468a4bc71798971fc8d"),
        "contentType" : "application/pdf",
        "chunkSize" : 261120,
        "metadata" : {
            "seriesNumber" : NumberLong(1),
            "fitAgeStart" : "4",
            "keywords" : {
                "contentKeywordList" : [ ],
                "mainActorList" : [
                    "Madeline "
                ],
                "storybookNameKeywordList" : [
                    "Madeline "
                ],
                "seriesName" : "Madeline",
                "topicList" : [
                    "Family members",
                    "Sick"
                ],
                "storybookName" : "Madeline "
            },
            "awards" : "凯迪克奖银奖",
            "foreignCountry" : "美国",
            "publisher" : "Penguin US",
            "authorList" : [
                "Ludwig Bemelmans"
            ],
            "isFiction" : true,
            "contentAbstract" : "马德林生病了，割了阑尾的马德林住进了医院，收到了爸爸妈妈送的鲜花和糖果。其他姑娘们看了马德林的礼物竟然也想得阑尾炎。是不是很有趣。",
            "isSeries" : true,
            "lexileIndex" : "",
            "fitAgeEnd" : "5",
            "type" : "storybook"
        },
        "filename" : "Madeline.pdf",
        "length" : 41363142,
        "uploadDate" : ISODate("2018-04-04T07:53:22.417Z"),
        "md5" : "d4a39c2396586560dc64d47f0cf90f83"
    }
    不过呢，再去show dbs，仍然是没有权限的：
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    > show dbs
    2018-04-08T11:59:21.864+0800 E QUERY    [thread1] Error: listDatabases failed:{
        "ok" : 0,
        "errmsg" : "not authorized on admin to execute command { listDatabases: 1.0 }",
        "code" : 13
    } :
    _getErrorWithCode@src/mongo/shell/utils.js:25:13
    Mongo.prototype.getDBs@src/mongo/shell/mongo.js:65:1
    shellHelper.show@src/mongo/shell/utils.js:816:19
    shellHelper@src/mongo/shell/utils.js:706:15
    @(shellhelp2):1:1
    但是，针对于自己有权限的数据库去show users查看用户，则是，正确的，有权限的：
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    > show users
    {
        "_id" : "gridfs.gridfs",
        "user" : "gridfs",
        "db" : "gridfs",
        "roles" : [
            {
                "role" : "dbOwner",
                "db" : "gridfs"
            }
        ]
    }
    所以，之前一直出错，估计是缺少了use gridfs了。
    【总结】
    此处在远端Mongo中加了权限限制后，本地Mac中mongo shell中连接数据库：
    ?
    1
    mongo --host xxx -u gridfs -p pwd --authenticationDatabase gridfs
    虽然能进去，但是操作失败：
    ?
    1
    2
    3
    4
    5
    6
    7
    > show users
    2018-04-08T14:55:16.499+0800 E QUERY    [thread1] Error: not authorized on test to execute command { usersInfo: 1.0 } :
    _getErrorWithCode@src/mongo/shell/utils.js:25:13
    DB.prototype.getUsers@src/mongo/shell/db.js:1686:1
    shellHelper.show@src/mongo/shell/utils.js:799:9
    shellHelper@src/mongo/shell/utils.js:706:15
    @(shellhelp2):1:1
    原因是：
    没有制定要使用对应数据库
    解决办法：
    方法1:use dbName
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    > use gridfs
    switched to db gridfs
    > show users
    {
        "_id" : "gridfs.gridfs",
        "user" : "gridfs",
        "db" : "gridfs",
        "roles" : [
            {
                "role" : "dbOwner",
                "db" : "gridfs"
            }
        ]
    }
    方法2:连接时（在uri中）指定连接到dbName
    ?
    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    ➜  ~ mongo xxx/gridfs -u gridfs -p pwd --authenticationDatabase gridfs
    MongoDB shell version v3.6.3
    connecting to: mongodb://xxx:27017/gridfs
    MongoDB server version: 3.2.19
    WARNING: shell and server versions do not match
    > show users
    {
        "_id" : "gridfs.gridfs",
        "user" : "gridfs",
        "db" : "gridfs",
        "roles" : [
            {
                "role" : "dbOwner",
                "db" : "gridfs"
            }
        ]
    }
    即可。

    转载请注明：在路上 » 【已解决】本地mongo shell中连接远程加了权限控制的mongoDB

    Post Views: 1,622

    与本文相关的文章

    发表我的评论
    取消评论

    表情

    Hi，您需要填写昵称和邮箱！

    • 昵称 (必填)
    • 邮箱 (必填)
    • 网址
    80 queries in 0.206 seconds, using 22.17MB memory