mongodb-authentication

name	mongodb-authentication
version	2.1.0
description	Master MongoDB authentication methods including SCRAM, X.509 certificates, LDAP, and Kerberos. Learn user creation, role assignment, and securing MongoDB deployments.
sasmp_version	1.3.0
bonded_agent	06-mongodb-security-administration
bond_type	PRIMARY_BOND
capabilities	["scram-authentication","x509-certificates","ldap-integration","user-management","role-assignment"]
input_validation	{"required_context":["auth_method","environment"],"optional_context":["existing_users","ldap_config","certificate_chain"]}
output_format	{"user_config":"object","connection_string":"string","verification_steps":"array","security_checklist":"array"}
error_handling	{"common_errors":[{"code":"AUTH001","condition":"Authentication failed","recovery":"Verify username, password, authSource database"},{"code":"AUTH002","condition":"User not found","recovery":"Check user exists in correct authenticationDatabase"},{"code":"AUTH003","condition":"Password policy violation","recovery":"Ensure password meets complexity requirements"}]}
prerequisites	{"mongodb_version":"4.0+","required_knowledge":["mongodb-basics","user-management"],"security_requirements":["mongod started with --auth or authorization: enabled"]}
testing	{"unit_test_template":"// Verify authentication\nconst client = new MongoClient(uri, { auth: { username, password } })\nawait client.connect()\nconst status = await client.db('admin').command({ connectionStatus: 1 })\nexpect(status.authInfo.authenticatedUsers[0].user).toBe(username)\n"}

MongoDB Authentication

Secure your MongoDB with proper authentication.

Quick Start

Enable Authentication

# Start MongoDB with authentication
mongod --auth --dbpath /data/db

# Or in config file (mongod.conf)
security:
  authorization: enabled

Create Admin User

// Connect to local server without auth first
const mongo = new MongoClient('mongodb://localhost:27017')
const admin = mongo.db('admin')

// Create admin user
await admin.command({
  createUser: 'admin',
  pwd: 'securepassword',  // Or use passwordPrompt()
  roles: ['root']
})

// Now restart mongod --auth

Authentication Methods

SCRAM (Salted Challenge Response)

// Default, password-based authentication

// Connection string
mongodb://username:password@localhost:27017/database

// With options
mongodb://username:password@localhost:27017/database?authSource=admin

// Create SCRAM user
db.createUser({
  user: 'appuser',
  pwd: 'password123',
  roles: ['readWrite']
})

X.509 Certificate

// Enterprise-grade certificate authentication


db.().({
  : ,
  : []
})


: