when I send db.getSiblingDB("$external").runCommand({createUser:"CN=192.168.31.100,OU=KernelUser,O=MongoDB,ST=New York,C=US",roles:[{role:'root',db:'admin'}]})
,return the error:
Cannot create an x.509 user with a subjectname that would be recognized as an internal cluster member.
May be the server and client certificates are using same values for O,OU fields
DN(distinguished name) from client certificate subject should differ from that of server