Mongodb server has startup warnings ''access control is not enabled for the database''

MongoDB University M201: MongoDB Performance
#1

Hi,

I have installed MongoDB Enterprise Edition 4.0.5 as a service on Windows 7 Professional.
Chose the default “Run the service as Network Service user” option.
Left default values in the rest of the fields as well.
Ran the mongo.exe from Command Interpreter and by clicking from Windows Explorer.
In both attempts I got the following warning:
2019-01-14T13:45:03.550+0200 I CONTROL [initandlisten] ** WARNING: Access control is not enabled for the database.
2019-01-14T13:45:03.550+0200 I CONTROL [initandlisten] ** Read and write access to data and configuration is unrestricted.
2019-01-14T13:45:03.550+0200 I CONTROL [initandlisten]
2019-01-14T13:45:03.550+0200 I CONTROL [initandlisten] Hotfix KB2731284 or later update is not installed, will zero-out data files.

How this can be fixed?

Thanks,
Regina.

#2

Take a look at:
https://docs.mongodb.com/manual/reference/configuration-options/
and
https://docs.mongodb.com/manual/reference/configuration-file-settings-command-line-options-mapping/
and give particular attention to areas where authentication is mentioned.

#3

@ Regina_20763

Also I would mention that these warnings are specifically targeted to production deployments, where unsecured data is vulnerable. For a developer in a course like this, it’s easiest and generally best to simply ignore the warnings, as (a) there isn’t much likelihood (I would hope :wink:) that anyone is going to get into your local system and (b) even if some bad person did, there is no valuable data here to be compromised.

OTH, if you enable authentication these will go away, but you’ll have to enter your authentication credentials every time you start mongo or mongod. HTH.

#4

Thanks for the explanation!

#5