Cannot create an x.509 user with a subjectname that would be recognized as an internal cluster member

when I send
db.getSiblingDB("$external").runCommand({createUser:"CN=192.168.31.100,OU=KernelUser,O=MongoDB,ST=New York,C=US",roles:[{role:'root',db:'admin'}]})

,return the error:

Cannot create an x.509 user with a subjectname that would be recognized as an internal cluster member.

why?
I do all follow “university.mongodb.com/mercury/M310


May be the server and client certificates are using same values for O,OU fields
DN(distinguished name) from client certificate subject should differ from that of server

1 Like

Yeah! Is solved! I change the ‘CN=127.0.0.1’ to ‘CN=192.168.31.100’,
and ready another visualserver for client ,

Server.pem(192.168.31.100):
subject= CN=192.168.31.100,OU=KernelUser,O=MongoDB,ST=New York,C=US

Client.pem(192.168.31.110):
subject= CN=customer,OU=customer,O=MongoDB,ST=New York,C=US

thank you very much!
:yum: :yum: :yum: :yum:

This topic was automatically closed 5 days after the last reply. New replies are no longer allowed.