[TOC] ## 给mongodb加个密码 无密码状态启动 ``` mongod --dbpath /opt/dbpath ``` **新建管理员用户** 进入mongodb命令行 ``` mongo ``` ``` >use admin db.createUser( { user: "ZqjAdmin", pwd:"AdminZqj123", roles: [{role: "userAdminAnyDatabase",db: "admin"}] } ) ; #结果 > Successfully added user: { "user" : "admin", "roles" : [ { "role" : "userAdminAnyDatabase", "db" : "admin" } ] } ``` **创建普通用户** ``` use tinode db.createUser( { user: "tinode", pwd: "tinode@0323", roles: [{role: 'readWrite', db: 'tinode'}] } ); ``` 查看已存在的用户 ``` >db.system.users.find() ``` 4.删除用户 操作 ``` >db.system.users.remove({user:"useradmin"}) ``` ## 使用命令行开启权限验证 开启权限验证 ``` #开启服务 > mongod --auth --dbpath /home/user1/mongodb/data --logpath /home/user1/mongodb/log/logs --fork #客户端连接并认证 >mongo >use foo >db.auth(“simpleUser”,”123456”) ``` ## 使用配置文件开启权限验证 在配置文件中添加 ``` shardsvr = true replSet=rs0 fork=true auth = true ``` 启动 ``` mongod -f /etc/mongodb.conf ``` ## 分片集群加密 [https://www.jianshu.com/p/3abcdd3ec958](https://www.jianshu.com/p/3abcdd3ec958) [https://www.jianshu.com/p/f021f1f3c60b](https://www.jianshu.com/p/f021f1f3c60b) ``` keyFile=/opt/tinode-mongodb/mongodb.key ```