Thank you. It helped to complete part of it.
Updated the parameter “mode” to use “preferSSL” instead of “requireSSL”. Still am unable to auth the X509 user.
vagrant@database:~/shared/certs$ mongo --port 31150 --host database.M310.mongodb.university
MongoDB shell version: 3.2.22
connecting to: database.M310.mongodb.university:31150/test
Welcome to the MongoDB shell.
For interactive help, type “help”.
For more comprehensive documentation, see
http://docs.mongodb.org/
Questions? Try the support group
http://groups.google.com/group/mongodb-user
MongoDB Enterprise > rs.initiate()
{
“info2” : “no configuration specified. Using a default configuration for the set”,
“me” : “database.M310.mongodb.university:31150”,
“ok” : 1
}
MongoDB Enterprise HomeWork5:PRIMARY> db.createUser( {user: ‘will’, pwd: ‘$uperAdmin’, roles:[ {role: ‘root’, db: ‘admin’} ]})
Successfully added user: {
“user” : “will”,
“roles” : [
{
“role” : “root”,
“db” : “admin”
}
]
}
MongoDB Enterprise HomeWork5:PRIMARY> db.auth(‘will’, ‘$uperAdmin’)
1
MongoDB Enterprise HomeWork5:PRIMARY> db.system.users.find()
{ “_id” : “admin.will”, “user” : “will”, “db” : “admin”, “credentials” : { “SCRAM-SHA-1” : { “iterationCount” : 10000, “salt” : “5ictLShkputfA81ZvjJ2mg==”, “storedKey” : “5pnBzClFZ14dKOC7UcwwUPWcXIs=”, “serverKey” : “vsGVCnNeYS3ESpK9NXnYTBSJViM=” } }, “roles” : [ { “role” : “root”, “db” : “admin” } ] }
MongoDB Enterprise HomeWork5:PRIMARY> rs.add(“database.m310.mongodb.university:31151”)
{ “ok” : 1 }
MongoDB Enterprise HomeWork5:PRIMARY> rs.add(“database.m310.mongodb.university:31152”)
{ “ok” : 1 }
MongoDB Enterprise HomeWork5:PRIMARY> db.getSiblingDB("$external").runCommand({ createUser: “C=US,ST=New York,L=New York City,O=MongoDB,OU=University2,CN=M310 Client, OU=kernelUser,CN=client”, rol db.getSiblingDB("$external").runCommand({ createUser: “C=US,ST=New York,L=New York City,O=MongoDB,OU=University2,CN=M310 Client, OU=kernelUser,CN=client”, roles: [{role: ‘userAdminAnyDatabase’, db: ‘admin’} ] })
{ “ok” : 1 }
MongoDB Enterprise HomeWork5:PRIMARY> db.getSiblingDB("$external").auth({ user: “C=US,ST=New York,L=New York City,O=MongoDB,OU=University2,CN=M310 Client”, mechanism: “MONGODB-X509” })
Error: Please enable SSL on the client-side to use the MONGODB-X509 authentication mechanism.
vagrant@database:~/shared/certs$ mongo --ssl --sslPEMKeyFile client.pem --sslCAFile ca.pem --host database.m310.mongodb.university --port 31150
MongoDB shell version: 3.2.22
connecting to: database.m310.mongodb.university:31150/test
MongoDB Enterprise HomeWork5:PRIMARY> db.getSiblingDB("$external").auth({ user: “C=US,ST=New York,L=New York City,O=MongoDB,OU=University2,CN=M310 Client”, mechanism: “MONGODB-X509” })
Error: Could not find user C=US,ST=New York,L=New York City,O=MongoDB,OU=University2,CN=M310 Client@$external
0
Please let me know whats wrong still.
Thanks…
