{"id":140,"date":"2019-11-27T03:12:08","date_gmt":"2019-11-27T03:12:08","guid":{"rendered":"http:\/\/www.betterit360.com\/?p=140"},"modified":"2019-11-27T03:12:08","modified_gmt":"2019-11-27T03:12:08","slug":"%e6%90%ad%e5%bb%bamongodb%e4%b8%89%e8%8a%82%e7%82%b9%e5%89%af%e6%9c%ac%e9%9b%86%ef%bc%88%e5%90%af%e7%94%a8keyfileauth%e8%ae%bf%e9%97%ae%e6%8e%a7%e5%88%b6%ef%bc%89","status":"publish","type":"post","link":"http:\/\/www.betterit360.com\/?p=140","title":{"rendered":"\u642d\u5efamongodb\u4e09\u8282\u70b9\u526f\u672c\u96c6\uff08\u542f\u7528keyfile+auth\u8bbf\u95ee\u63a7\u5236\uff09"},"content":{"rendered":"\n

\u73af\u5883\u7248\u672c\uff1a<\/strong><\/strong><\/p>\n\n\n\n

CentOS Linux release 7.6.1810 (Core)<\/p>\n\n\n\n

mongodb-linux-x86_64-rhel70-3.4.21.tgz<\/p>\n\n\n\n

\u5b89\u88c5\u6b65\u9aa4\uff1a<\/strong><\/strong><\/p>\n\n\n\n

The basic procedure is to start the\u00a0mongod\u00a0instances that will become members of the replica set, configure the replica set itself, and then add the\u00a0mongod\u00a0instances to it.<\/p>\n\n\n\n

Before you can deploy a replica set, you must install MongoDB on each system that will be part of your\u00a0replica set.<\/p>\n\n\n\n

1\u3001\u5728\u6bcf\u53f0\u673a\u5668\u4e0a\u4e0b\u8f7d\u89e3\u538bmongodb\u5b89\u88c5\u5305<\/strong><\/strong><\/h4>\n\n\n\n

curl -O https:\/\/fastdl.mongodb.org\/linux\/mongodb-linux-x86_64-rhel70-3.4.21.tgz
tar -zxvf mongodb-linux-x86_64-rhel70-3.4.21.tgz
mv mongodb-linux-x86_64-rhel70-3.4.21\/ \/usr\/local\/mongodb<\/p>\n\n\n\n

2\u3001\u5728\u6bcf\u53f0\u673a\u5668\u4e0a\u521b\u5efamongodb\u7684data\u3001log\u4ee5\u53ca\u914d\u7f6e\u76ee\u5f55<\/strong><\/strong><\/h4>\n\n\n\n

cd \/usr\/local\/mongodb
mkdir -p data\/db
mkdir log
touch log\/mongod.log
mkdir etc
touch etc\/mongod.conf<\/p>\n\n\n\n

3\u3001\u5728\u6bcf\u53f0\u673a\u5668\u4e0a\u914d\u7f6econfig\u6587\u4ef6<\/strong><\/strong><\/h4>\n\n\n\n

vi etc\/mongod.conf<\/p>\n\n\n\n

\u4e3a\u4e86\u542f\u52a8\u65b9\u4fbf\uff0c\u53ef\u4ee5\u5c06mongodb\u7684\u542f\u52a8\u914d\u7f6e\u9879\u76f4\u63a5\u8bbe\u7f6e\u5728\u914d\u7f6e\u6587\u4ef6\u4e2d\uff1a<\/p>\n\n\n\n

dbpath = \/usr\/local\/mongodb\/data\/db\t\t\t\t# \u6307\u5b9a\u6570\u636e\u5e93\u8def\u5f84
logpath = \/usr\/local\/mongodb\/log\/mongod.log\t\t# \u6307\u5b9amongodb\u65e5\u5fd7\u6587\u4ef6
logappend = true\t\t\t\t\t\t\t\t# \u4f7f\u7528\u8ffd\u52a0\u7684\u65b9\u5f0f\u5199\u65e5\u5fd7
port = 27017\t\t\t\t\t\t\t\t\t#\u8bbe\u7f6e\u7aef\u53e3\u53f7\u4e3a27017
fork = true\t\t\t\t\t\t\t\t\t#\u8bbe\u7f6e\u4ee5\u5b88\u62a4\u8fdb\u7a0b\u7684\u65b9\u5f0f\u542f\u52a8mongod
replSet = testxhrs            \t\t\t\t#\u8bbe\u7f6e\u526f\u672c\u96c6\u7684\u540d\u5b57\u4e3atestxhrs\uff0c\u540c\u4e00\u526f\u672c\u96c6\u7fa4\u7684replSet\u540d\u79f0\u5fc5<\/strong>\u987b<\/strong>\u76f8\u540c<\/strong>\u3002<\/p>\n\n\n\n

4<\/strong>\u3001<\/strong>\u5206\u522b\u5728\u6bcf\u53f0\u673a\u5668\u4e0a\u542f\u52a8<\/strong>mongodb<\/strong><\/strong><\/p>\n\n\n\n

cd \/usr\/local\/mongodb
.\/bin\/mongod -f .\/etc\/mongod.conf\t\t\t\t\t#\u6307\u5b9a\u4ee5mongod.conf\u914d\u7f6e\u542f\u52a8mongod<\/p>\n\n\n\n

5<\/strong>\u3001\u521d\u59cb\u5316\u526f\u672c\u96c6<\/strong><\/strong><\/h4>\n\n\n\n

IMPORTANT<\/strong>:<\/strong>Run rs.initiate() on just one and only one mongod instance for the replica set.<\/strong><\/strong><\/p>\n\n\n\n

\u767b\u5f55\u4efb\u610f\u4e00\u53f0\u673a\u5668\u7684mongodb\u540e\u53f0\u7ba1\u7406shell\uff1a<\/p>\n\n\n\n

cd \/usr\/local\/mongodb
.\/bin\/mongo
use admin
rs.initiate( {<\/p>\n\n\n\n

   _id : “testxhrs”,<\/p>\n\n\n\n

   members: [<\/p>\n\n\n\n

      { _id: 0, host: “192.168.191.147:27017” },<\/p>\n\n\n\n

      { _id: 1, host: “192.168.191.148:27017” },<\/p>\n\n\n\n

      { _id: 2, host: “192.168.191.149:27017” }<\/p>\n\n\n\n

   ]<\/p>\n\n\n\n

}) \u00a0 #\u521d\u59cb\u5316\u914d\u7f6e<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u6ce8\u610f\uff1a\u5982\u679c\u6267\u884c<\/strong>\u521d\u59cb\u5316<\/strong>\u62a5\u9519\uff0c\u68c0\u67e5\u4e09\u53f0\u670d\u52a1\u5668\u7684\u9632\u706b\u589927017\u7aef\u53e3\u662f\u5426\u5f00\u653e\u3002 <\/strong><\/p>\n\n\n\n

\u901a\u8fc7rs.conf()\u67e5\u770b\u526f\u672c\u96c6\u914d\u7f6e\uff1a<\/p>\n\n\n\n

testxhrs:PRIMARY> rs.conf()<\/p>\n\n\n\n

{<\/p>\n\n\n\n

\t“_id” : “testxhrs”,<\/p>\n\n\n\n

\t“version” : 1,<\/p>\n\n\n\n

\t“protocolVersion” : NumberLong(1),<\/p>\n\n\n\n

\t“members” : [<\/p>\n\n\n\n

\t\t{<\/p>\n\n\n\n

\t\t\t“_id” : 0,<\/p>\n\n\n\n

\t\t\t“host” : “192.168.191.147:27017”,<\/p>\n\n\n\n

\t\t\t“arbiterOnly” : false,<\/p>\n\n\n\n

\t\t\t“buildIndexes” : true,<\/p>\n\n\n\n

\t\t\t“hidden” : false,<\/p>\n\n\n\n

\t\t\t“priority” : 1,<\/p>\n\n\n\n

\t\t\t“tags” : {<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“slaveDelay” : NumberLong(0),<\/p>\n\n\n\n

\t\t\t“votes” : 1<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t{<\/p>\n\n\n\n

\t\t\t“_id” : 1,<\/p>\n\n\n\n

\t\t\t“host” : “192.168.191.148:27017”,<\/p>\n\n\n\n

\t\t\t“arbiterOnly” : false,<\/p>\n\n\n\n

\t\t\t“buildIndexes” : true,<\/p>\n\n\n\n

\t\t\t“hidden” : false,<\/p>\n\n\n\n

\t\t\t“priority” : 1,<\/p>\n\n\n\n

\t\t\t“tags” : {<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“slaveDelay” : NumberLong(0),<\/p>\n\n\n\n

\t\t\t“votes” : 1<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t{<\/p>\n\n\n\n

\t\t\t“_id” : 2,<\/p>\n\n\n\n

\t\t\t“host” : “192.168.191.149:27017”,<\/p>\n\n\n\n

\t\t\t“arbiterOnly” : false,<\/p>\n\n\n\n

\t\t\t“buildIndexes” : true,<\/p>\n\n\n\n

\t\t\t“hidden” : false,<\/p>\n\n\n\n

\t\t\t“priority” : 1,<\/p>\n\n\n\n

\t\t\t“tags” : {<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“slaveDelay” : NumberLong(0),<\/p>\n\n\n\n

\t\t\t“votes” : 1<\/p>\n\n\n\n

\t\t}<\/p>\n\n\n\n

\t],<\/p>\n\n\n\n

\t“settings” : {<\/p>\n\n\n\n

\t\t“chainingAllowed” : true,<\/p>\n\n\n\n

\t\t“heartbeatIntervalMillis” : 2000,<\/p>\n\n\n\n

\t\t“heartbeatTimeoutSecs” : 10,<\/p>\n\n\n\n

\t\t“electionTimeoutMillis” : 10000,<\/p>\n\n\n\n

\t\t“catchUpTimeoutMillis” : 60000,<\/p>\n\n\n\n

\t\t“getLastErrorModes” : {<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t“getLastErrorDefaults” : {<\/p>\n\n\n\n

\t\t\t“w” : 1,<\/p>\n\n\n\n

\t\t\t“wtimeout” : 0<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t“replicaSetId” : ObjectId(“5d0afcba1d434d32a01ea25f”)<\/p>\n\n\n\n

\t}<\/p>\n\n\n\n

}<\/p>\n\n\n\n

testxhrs:PRIMARY> <\/p>\n\n\n\n

\u901a\u8fc7rs.status()\u67e5\u770b\u786e\u8ba4\u526f\u672c\u96c6\u4e3b\u8282\u70b9\uff1a<\/p>\n\n\n\n

testxhrs:PRIMARY> rs.status()<\/p>\n\n\n\n

{<\/p>\n\n\n\n

\t“set” : “testxhrs”,<\/p>\n\n\n\n

\t“date” : ISODate(“2019-06-20T03:36:28.575Z”),<\/p>\n\n\n\n

\t“myState” : 1,<\/p>\n\n\n\n

\t“term” : NumberLong(1),<\/p>\n\n\n\n

\t“syncingTo” : “”,<\/p>\n\n\n\n

\t“syncSourceHost” : “”,<\/p>\n\n\n\n

\t“syncSourceId” : -1,<\/p>\n\n\n\n

\t“heartbeatIntervalMillis” : NumberLong(2000),<\/p>\n\n\n\n

\t“optimes” : {<\/p>\n\n\n\n

\t\t“lastCommittedOpTime” : {<\/p>\n\n\n\n

\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t“appliedOpTime” : {<\/p>\n\n\n\n

\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t“durableOpTime” : {<\/p>\n\n\n\n

\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t}<\/p>\n\n\n\n

\t},<\/p>\n\n\n\n

\t“members” : [<\/p>\n\n\n\n

\t\t{<\/p>\n\n\n\n

\t\t\t“_id” : 0,<\/p>\n\n\n\n

\t\t\t“name” : “192.168.191.147:27017”,<\/p>\n\n\n\n

\t\t\t“health” : 1,<\/p>\n\n\n\n

\t\t\t“state” : 1,<\/p>\n\n\n\n

\t\t\t“stateStr” : “PRIMARY”,<\/p>\n\n\n\n

\t\t\t“uptime” : 1438,<\/p>\n\n\n\n

\t\t\t“optime” : {<\/p>\n\n\n\n

\t\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“optimeDate” : ISODate(“2019-06-20T03:36:18Z”),<\/p>\n\n\n\n

\t\t\t“syncingTo” : “”,<\/p>\n\n\n\n

\t\t\t“syncSourceHost” : “”,<\/p>\n\n\n\n

\t\t\t“syncSourceId” : -1,<\/p>\n\n\n\n

\t\t\t“infoMessage” : “”,<\/p>\n\n\n\n

\t\t\t“electionTime” : Timestamp(1561001157, 1),<\/p>\n\n\n\n

\t\t\t“electionDate” : ISODate(“2019-06-20T03:25:57Z”),<\/p>\n\n\n\n

\t\t\t“configVersion” : 1,<\/p>\n\n\n\n

\t\t\t“self” : true,<\/p>\n\n\n\n

\t\t\t“lastHeartbeatMessage” : “”<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t{<\/p>\n\n\n\n

\t\t\t“_id” : 1,<\/p>\n\n\n\n

\t\t\t“name” : “192.168.191.148:27017”,<\/p>\n\n\n\n

\t\t\t“health” : 1,<\/p>\n\n\n\n

\t\t\t“state” : 2,<\/p>\n\n\n\n

\t\t\t“stateStr” : “SECONDARY”,<\/p>\n\n\n\n

\t\t\t“uptime” : 642,<\/p>\n\n\n\n

\t\t\t“optime” : {<\/p>\n\n\n\n

\t\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“optimeDurable” : {<\/p>\n\n\n\n

\t\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“optimeDate” : ISODate(“2019-06-20T03:36:18Z”),<\/p>\n\n\n\n

\t\t\t“optimeDurableDate” : ISODate(“2019-06-20T03:36:18Z”),<\/p>\n\n\n\n

\t\t\t“lastHeartbeat” : ISODate(“2019-06-20T03:36:28.211Z”),<\/p>\n\n\n\n

\t\t\t“lastHeartbeatRecv” : ISODate(“2019-06-20T03:36:28.257Z”),<\/p>\n\n\n\n

\t\t\t“pingMs” : NumberLong(0),<\/p>\n\n\n\n

\t\t\t“lastHeartbeatMessage” : “”,<\/p>\n\n\n\n

\t\t\t“syncingTo” : “192.168.191.147:27017”,<\/p>\n\n\n\n

\t\t\t“syncSourceHost” : “192.168.191.147:27017”,<\/p>\n\n\n\n

\t\t\t“syncSourceId” : 0,<\/p>\n\n\n\n

\t\t\t“infoMessage” : “”,<\/p>\n\n\n\n

\t\t\t“configVersion” : 1<\/p>\n\n\n\n

\t\t},<\/p>\n\n\n\n

\t\t{<\/p>\n\n\n\n

\t\t\t“_id” : 2,<\/p>\n\n\n\n

\t\t\t“name” : “192.168.191.149:27017”,<\/p>\n\n\n\n

\t\t\t“health” : 1,<\/p>\n\n\n\n

\t\t\t“state” : 2,<\/p>\n\n\n\n

\t\t\t“stateStr” : “SECONDARY”,<\/p>\n\n\n\n

\t\t\t“uptime” : 642,<\/p>\n\n\n\n

\t\t\t“optime” : {<\/p>\n\n\n\n

\t\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“optimeDurable” : {<\/p>\n\n\n\n

\t\t\t\t“ts” : Timestamp(1561001778, 1),<\/p>\n\n\n\n

\t\t\t\t“t” : NumberLong(1)<\/p>\n\n\n\n

\t\t\t},<\/p>\n\n\n\n

\t\t\t“optimeDate” : ISODate(“2019-06-20T03:36:18Z”),<\/p>\n\n\n\n

\t\t\t“optimeDurableDate” : ISODate(“2019-06-20T03:36:18Z”),<\/p>\n\n\n\n

\t\t\t“lastHeartbeat” : ISODate(“2019-06-20T03:36:28.211Z”),<\/p>\n\n\n\n

\t\t\t“lastHeartbeatRecv” : ISODate(“2019-06-20T03:36:28.248Z”),<\/p>\n\n\n\n

\t\t\t“pingMs” : NumberLong(0),<\/p>\n\n\n\n

\t\t\t“lastHeartbeatMessage” : “”,<\/p>\n\n\n\n

\t\t\t“syncingTo” : “192.168.191.147:27017”,<\/p>\n\n\n\n

\t\t\t“syncSourceHost” : “192.168.191.147:27017”,<\/p>\n\n\n\n

\t\t\t“syncSourceId” : 0,<\/p>\n\n\n\n

\t\t\t“infoMessage” : “”,<\/p>\n\n\n\n

\t\t\t“configVersion” : 1<\/p>\n\n\n\n

\t\t}<\/p>\n\n\n\n

\t],<\/p>\n\n\n\n

\t“ok” : 1<\/p>\n\n\n\n

}<\/p>\n\n\n\n

testxhrs:PRIMARY><\/p>\n\n\n\n

6<\/strong>\u3001\u521b\u5efa\u8d26\u53f7\uff08\u5728\u4e3b\u8282\u70b9\u4e0a\u64cd\u4f5c\uff09\uff1a<\/strong>
# .\/bin\/mongo<\/p>\n\n\n\n

> use admin<\/p>\n\n\n\n

# \u521b\u5efa\u7528\u6237\u7ba1\u7406\u5458\uff08\u53ef\u7ba1\u7406\u7528\u6237\u3001\u6743\u9650\uff09<\/p>\n\n\n\n

> db.createUser({user: “admin”,pwd: “p@ssw0rd4admin”,roles: [ { role: “userAdminAnyDatabase”, db: “admin” } ]})<\/p>\n\n\n\n

# \u521b\u5efa\u6570\u636e\u5e93\u7ba1\u7406\u5458\uff08\u53ef\u7ba1\u7406\u6570\u636e\u5e93\uff09<\/p>\n\n\n\n

\u5728MongoDB shell\u4e2d\u5207\u6362\u5230\u6570\u636e\u5e93admin\uff0c\u518d\u4f7f\u7528createUser\u6dfb\u52a0\u89d2\u8272\u4e3areadWriteAnyDatabase\u3001dbAdminAnyDatabase\u548cclusterAdmin\u7684\u7528\u6237\u3002\u8fd9\u8ba9\u7528\u6237\u80fd\u591f\u8bbf\u95ee\u7cfb\u7edf\u4e2d\u7684\u6240\u6709\u6570\u636e\u5e93\u3001\u521b\u5efa\u65b0\u7684\u6570\u636e\u5e93\u4ee5\u53ca\u7ba1\u7406 MongoDB \u96c6\u7fa4\u3002<\/p>\n\n\n\n

> use admin<\/p>\n\n\n\n

switched to db admin<\/p>\n\n\n\n

> db.createUser(<\/p>\n\n\n\n

…    {<\/p>\n\n\n\n

…      user: “dbadmin”,<\/p>\n\n\n\n

…      pwd: “p@ssw0rd4dbadmin”,<\/p>\n\n\n\n

…      roles: [ “readWriteAnyDatabase”, “dbAdminAnyDatabase”,”clusterAdmin” ]<\/p>\n\n\n\n

…    }<\/p>\n\n\n\n

… )<\/p>\n\n\n\n

Successfully added user: {<\/p>\n\n\n\n

    “user” : “dbadmin”,<\/p>\n\n\n\n

    “roles” : [<\/p>\n\n\n\n

            “readWriteAnyDatabase”,<\/p>\n\n\n\n

            “dbAdminAnyDatabase”,<\/p>\n\n\n\n

            “clusterAdmin”<\/p>\n\n\n\n

    ]<\/p>\n\n\n\n

}<\/p>\n\n\n\n

# \u521b\u5efa\u8d85\u7ea7\u7ba1\u7406\u5458\uff08\u53ef\u7ba1\u7406\u7528\u6237\u3001\u6743\u9650\u3001\u6570\u636e\u5e93\uff09<\/p>\n\n\n\n

> db.createUser({“user”:”SuperAdmin”,”pwd”:”p@ssw0rd4SA”,”roles”:[“root”]});<\/p>\n\n\n\n

# \u521b\u5efa\u96c6\u7fa4\u7ba1\u7406\u5458<\/p>\n\n\n\n

> db.createUser({“user” : “cluster”,”pwd” : “p@ssw0rd4cluster”,roles: [ { “role” : “clusterAdmin”, “db” : “admin” } ]})<\/p>\n\n\n\n

#\u521b\u5efa\u666e\u901a\u7528\u6237<\/p>\n\n\n\n

> use db1;<\/p>\n\n\n\n

> db.createUser({user:”user1″,pwd:”p@ssw0rd4user1″,roles:[{role:”dbOwner”,db:”db1″}]})<\/p>\n\n\n\n

7\u3001<\/strong>\u542f\u7528<\/strong>keyfile+auth<\/strong>\u8bbf\u95ee\u63a7\u5236<\/strong><\/strong><\/p>\n\n\n\n

\u751f\u6210keyfile\u6587\u4ef6, \u8bbe\u7f6e\u6743\u9650\u4e3a400, \u5e76\u62f7\u8d1d\u5230\u6bcf\u4e2a\u526f\u672c\u96c6\u6210\u5458\uff1a<\/strong><\/strong><\/p>\n\n\n\n

\u6ce8\uff1aCopy the keyfile to each server hosting the replica set members. Ensure that the user running the mongod instances is the owner of the file and can access the keyfile.<\/p>\n\n\n\n

cd \/usr\/local\/mongodb
mkdir conf<\/p>\n\n\n\n

openssl rand -base64 756 -out conf\/keyfile<\/p>\n\n\n\n

chmod 400 conf\/keyfile<\/p>\n\n\n\n

\u5728\u6bcf\u4e2a\u526f\u672c\u96c6\u6210\u5458\u4e0a<\/strong>\u4fee\u6539\u914d\u7f6e\u6587\u4ef6<\/strong>\uff1a<\/strong><\/strong><\/p>\n\n\n\n

keyFile = \/usr\/local\/mongodb\/conf\/keyfile<\/p>\n\n\n\n

auth = true<\/p>\n\n\n\n

\u91cd\u65b0\u542f\u52a8\u5404\u4e2a\u8282\u70b9<\/strong>\uff08<\/strong>\u5148\u5173SECONDARY\uff0c\u540e\u5173PRIMARY<\/strong>\uff09\uff1a<\/strong><\/strong><\/p>\n\n\n\n

.\/bin\/mongod -f .\/etc\/mongod.conf –shutdown<\/p>\n\n\n\n

.\/bin\/mongod -f .\/etc\/mongod.conf<\/p>\n\n\n\n

8<\/strong>\u3001<\/strong>\u6d4b\u8bd5\u526f\u672c\u96c6\u7684\u6570\u636e\u590d\u5236\u529f\u80fd<\/strong><\/strong><\/p>\n\n\n\n

\u5728\u4e3b\u8282\u70b9\u6d4b\u8bd5\u5199\u5165<\/strong>\uff1a<\/strong><\/strong><\/p>\n\n\n\n

testxhrs:PRIMARY> use db1<\/p>\n\n\n\n

switched to db db1<\/p>\n\n\n\n

testxhrs:PRIMARY> db.auth(‘user1′,’p@ssw0rd4user1’)<\/p>\n\n\n\n

1<\/p>\n\n\n\n

testxhrs:PRIMARY> db.t_user.insert({“user”: “mongodb”})<\/p>\n\n\n\n

WriteResult({ “nInserted” : 1 })<\/p>\n\n\n\n

testxhrs:PRIMARY> db.t_user.find();<\/p>\n\n\n\n

{ “_id” : ObjectId(“5d08acb0372140acd6e68525”), “user” : “mongodb” }<\/p>\n\n\n\n

testxhrs:PRIMARY> <\/p>\n\n\n\n

\u5728secondary\u8282\u70b9\u6d4b\u8bd5\u67e5\u8be2\u662f\u5426\u6709\u6570\u636e\u540c\u6b65\uff1a<\/strong><\/strong><\/p>\n\n\n\n

testxhrs:SECONDARY> use db1<\/p>\n\n\n\n

switched to db db1<\/p>\n\n\n\n

testxhrs:SECONDARY> db.auth(‘user1′,’p@ssw0rd4user1’)<\/p>\n\n\n\n

1<\/p>\n\n\n\n

testxhrs:SECONDARY> db.t_user.find()<\/p>\n\n\n\n

Error: error: {<\/p>\n\n\n\n

\t“ok” : 0,<\/p>\n\n\n\n

\t“errmsg” : “not master and slaveOk=false”,<\/p>\n\n\n\n

\t“code” : 13435,<\/p>\n\n\n\n

\t“codeName” : “NotMasterNoSlaveOk”<\/p>\n\n\n\n

}<\/p>\n\n\n\n

testxhrs:SECONDARY> rs.slaveOk()  #\u9ed8\u8ba4\u60c5\u51b5\u4e0bsecondary\u662f\u4e0d\u53ef\u4ee5\u8bfb\u5199\u7684\uff0c\u9700\u8981\u6267\u884crs.slaveOk()\u624d\u53ef\u4ee5\u6267\u884c\u67e5\u770b\u547d\u4ee4<\/p>\n\n\n\n

\u6ce8\uff1a\u56e0\u4e3amongodb\u9ed8\u8ba4\u662f\u4ece\u4e3b\u8282\u70b9\u8bfb\u5199\u6570\u636e\u7684\uff0c\u526f\u672c\u8282\u70b9\u4e0a\u4e0d\u5141\u8bb8\u8bfb\uff0c\u9700\u8981\u8bbe\u7f6e\u526f\u672c\u8282\u70b9\u53ef\u4ee5\u8bfb\u3002<\/p>\n\n\n\n

testxhrs:SECONDARY> db.getMongo().setSlaveOk();<\/p>\n\n\n\n

\u6b64\u65f6\u5c31\u53ef\u4ee5\u8bfb\u53d6\u6570\u636e\u4e86\u3002<\/p>\n\n\n\n

testxhrs:SECONDARY> db.t_user.find()<\/p>\n\n\n\n

\u63a7\u5236\u53f0\u8f93\u51fa\uff1a{ “_id” : ObjectId(“5d08acb0372140acd6e68525”), “user” : “mongodb” }<\/p>\n\n\n\n

\u53ef\u4ee5\u770b\u51fa\u6570\u636e\u590d\u5236\u7684\u529f\u80fd\u662f\u53ef\u7528\u7684\u3002<\/p>\n\n\n\n

9<\/strong>\u3001<\/strong>\u6d4b\u8bd5\u526f\u672c\u96c6\u7684\u6545\u969c\u8f6c\u79fb\u529f\u80fd<\/strong>
<\/strong>\u5c06\u4e3b\u8282\u70b9192.168.191.147\u7684mongod\u8fdb\u7a0b\u6740\u6b7b\uff1a<\/p>\n\n\n\n

testxhrs:PRIMARY> use admin
testxhrs:PRIMARY> db.shutdownServer()<\/p>\n\n\n\n

\u901a\u8fc7rs.status()\u6765\u67e5\u770b\u526f\u672c\u96c6\u72b6\u6001\uff0c\u6b64\u65f6\u53ef\u4ee5\u770b\u5230\uff0c192.168.191.149\u539f\u672c\u662f\u526f\u8282\u70b9\uff0c\u73b0\u5728\u81ea\u52a8\u8f6c\u6362\u4e3a\u4e3b\u8282\u70b9\u3002<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

10\u3001\u5ba2\u6237\u7aef\u5de5\u5177\u8fde\u63a5\u6d4b\u8bd5<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u9644\uff1a<\/strong><\/p>\n\n\n\n

1.\u67e5\u770b\u6240\u6709\u8d26\u6237 :<\/strong><\/p>\n\n\n\n

> use admin <\/p>\n\n\n\n

switched to db admin <\/p>\n\n\n\n

> db.auth(‘admin’,’password’) <\/p>\n\n\n\n

1 <\/p>\n\n\n\n

> db.system.users.find().pretty()<\/strong><\/p>\n\n\n\n

2.\u67e5\u770b\u5f53\u524d\u5e93\u4e0b\u8d26\u6237 :<\/strong><\/p>\n\n\n\n

> use admin <\/p>\n\n\n\n

switched to db admin <\/p>\n\n\n\n

> show users<\/strong><\/strong><\/p>\n\n\n\n

> use test<\/p>\n\n\n\n

switched to db test<\/p>\n\n\n\n

> show users<\/p>\n\n\n\n

3.\u4fee\u6539\u7528\u6237\u5bc6\u7801\uff1a<\/strong><\/p>\n\n\n\n

The following operation changes the password of the user named accountUser in the products database to SOh3TbYhx8ypJPxmt1oOfL:<\/p>\n\n\n\n

use products<\/strong><\/strong><\/p>\n\n\n\n

db.changeUserPassword(“accountUser”, “SOh3TbYhx8ypJPxmt1oOfL”)<\/strong><\/strong><\/p>\n\n\n\n

4.\u4fee\u6539\u7528\u6237\u6743\u9650\u7b49\uff1a<\/strong><\/p>\n\n\n\n

Example<\/p>\n\n\n\n

Given a user appClient01 in the products database with the following user info:<\/p>\n\n\n\n

{<\/p>\n\n\n\n

   “_id” : “products.appClient01”,<\/p>\n\n\n\n

   “user” : “appClient01”,<\/p>\n\n\n\n

   “db” : “products”,<\/p>\n\n\n\n

   “customData” : { “empID” : “12345”, “badge” : “9156” },<\/p>\n\n\n\n

   “roles” : [<\/p>\n\n\n\n

       { “role” : “readWrite”,<\/p>\n\n\n\n

         “db” : “products”<\/p>\n\n\n\n

       },<\/p>\n\n\n\n

       { “role” : “read”,<\/p>\n\n\n\n

         “db” : “inventory”<\/p>\n\n\n\n

       }<\/p>\n\n\n\n

   ]<\/p>\n\n\n\n

}<\/p>\n\n\n\n

The following\u00a0db.updateUser()\u00a0method\u00a0completely\u00a0replaces the user\u2019s\u00a0customData\u00a0and\u00a0roles\u00a0data:<\/p>\n\n\n\n

use products<\/strong><\/strong><\/p>\n\n\n\n

db.updateUser( “appClient01”,<\/strong><\/strong><\/p>\n\n\n\n

               {<\/strong><\/strong><\/p>\n\n\n\n

                 customData : { employeeId : “0x3039” },<\/strong><\/strong><\/p>\n\n\n\n

                 roles : [<\/strong><\/strong><\/p>\n\n\n\n

                           { role : “read”, db : “assets”  }<\/strong><\/strong><\/p>\n\n\n\n

                         ]<\/strong><\/strong><\/p>\n\n\n\n

                }<\/strong><\/strong><\/p>\n\n\n\n

             )<\/strong><\/strong><\/p>\n\n\n\n

The user appClient01 in the products database now has the following user information:<\/p>\n\n\n\n

{<\/p>\n\n\n\n

   “_id” : “products.appClient01”,<\/p>\n\n\n\n

   “user” : “appClient01”,<\/p>\n\n\n\n

   “db” : “products”,<\/p>\n\n\n\n

   “customData” : { “employeeId” : “0x3039” },<\/p>\n\n\n\n

   “roles” : [<\/p>\n\n\n\n

       { “role” : “read”,<\/p>\n\n\n\n

         “db” : “assets”<\/p>\n\n\n\n

       }<\/p>\n\n\n\n

   ]<\/p>\n\n\n\n

}<\/p>\n\n\n\n

5.\u5206\u914d\u7528\u6237\u66f4\u591a\u6743\u9650\uff1a<\/strong><\/p>\n\n\n\n

Example<\/p>\n\n\n\n

Given a user accountUser01 in the products database with the following roles:<\/p>\n\n\n\n

“roles” : [<\/p>\n\n\n\n

    { “role” : “assetsReader”,<\/p>\n\n\n\n

      “db” : “assets”<\/p>\n\n\n\n

    }<\/p>\n\n\n\n

]<\/p>\n\n\n\n

The following\u00a0grantRolesToUser()\u00a0operation gives\u00a0accountUser01\u00a0the\u00a0readWrite\u00a0role on the\u00a0products\u00a0database and the\u00a0read\u00a0role on the\u00a0stock\u00a0database.<\/p>\n\n\n\n

use products<\/strong><\/strong><\/p>\n\n\n\n

db.grantRolesToUser(<\/strong><\/strong><\/p>\n\n\n\n

   “accountUser01”,<\/strong><\/strong><\/p>\n\n\n\n

   [ “readWrite” , { role: “read”, db: “stock” } ],<\/strong><\/strong><\/p>\n\n\n\n

   { w: “majority” , wtimeout: 4000 }<\/strong><\/strong><\/p>\n\n\n\n

)<\/strong><\/strong><\/p>\n\n\n\n

The user accountUser01 in the products database now has the following roles:<\/p>\n\n\n\n

“roles” : [<\/p>\n\n\n\n

    { “role” : “assetsReader”,<\/p>\n\n\n\n

      “db” : “assets”<\/p>\n\n\n\n

    },<\/p>\n\n\n\n

    { “role” : “read”,<\/p>\n\n\n\n

      “db” : “stock”<\/p>\n\n\n\n

    },<\/p>\n\n\n\n

    { “role” : “readWrite”,<\/p>\n\n\n\n

      “db” : “products”<\/p>\n\n\n\n

    }<\/p>\n\n\n\n

]<\/p>\n\n\n\n

6.\u64a4\u9500\u7528\u6237\u76f8\u5173\u6743\u9650\uff1a<\/strong><\/p>\n\n\n\n

Example<\/p>\n\n\n\n

The accountUser01 user in the products database has the following roles:<\/p>\n\n\n\n

“roles” : [<\/p>\n\n\n\n

    { “role” : “assetsReader”,<\/p>\n\n\n\n

      “db” : “assets”<\/p>\n\n\n\n

    },<\/p>\n\n\n\n

    { “role” : “read”,<\/p>\n\n\n\n

      “db” : “stock”<\/p>\n\n\n\n

    },<\/p>\n\n\n\n

    { “role” : “readWrite”,<\/p>\n\n\n\n

      “db” : “products”<\/p>\n\n\n\n

    }<\/p>\n\n\n\n

]<\/p>\n\n\n\n

The following\u00a0db.revokeRolesFromUser()\u00a0method removes the two of the user\u2019s roles: the\u00a0read\u00a0role on the\u00a0stock\u00a0database and the\u00a0readWrite\u00a0role on the\u00a0products\u00a0database, which is also the database on which the method runs:<\/p>\n\n\n\n

use products<\/strong><\/strong><\/p>\n\n\n\n

db.revokeRolesFromUser( “accountUser01”,<\/strong><\/strong><\/p>\n\n\n\n

                        [ { role: “read”, db: “stock” }, “readWrite” ],<\/strong><\/strong><\/p>\n\n\n\n

                        { w: “majority” }<\/strong><\/strong><\/p>\n\n\n\n

                      )<\/strong><\/strong><\/p>\n\n\n\n

The user accountUser01 user in the products database now has only one remaining role:<\/p>\n\n\n\n

“roles” : [<\/p>\n\n\n\n

    { “role” : “assetsReader”,<\/p>\n\n\n\n

      “db” : “assets”<\/p>\n\n\n\n

    }<\/p>\n\n\n\n

]<\/p>\n","protected":false},"excerpt":{"rendered":"

\u73af\u5883\u7248\u672c\uff1a CentOS Linux release 7.6.1810 (Core) mongodb-linu … \u7ee7\u7eed\u9605\u8bfb\u201c\u642d\u5efamongodb\u4e09\u8282\u70b9\u526f\u672c\u96c6\uff08\u542f\u7528keyfile+auth\u8bbf\u95ee\u63a7\u5236\uff09\u201d<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"http:\/\/www.betterit360.com\/index.php?rest_route=\/wp\/v2\/posts\/140"}],"collection":[{"href":"http:\/\/www.betterit360.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.betterit360.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.betterit360.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.betterit360.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=140"}],"version-history":[{"count":0,"href":"http:\/\/www.betterit360.com\/index.php?rest_route=\/wp\/v2\/posts\/140\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.betterit360.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.betterit360.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=140"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.betterit360.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}