连接 MongoDB 鉴权失败。

Question

我正在使用版本为3的MongoDB，创建了一个名为“logMonitor”的数据库，并创建了一个用户，如下所示：

{
    "_id" : "logMonitor.log",
    "user" : "log",
    "db" : "logMonitor",
    "roles" : [
        {
            "role" : "readWrite",
            "db" : "logMonitor"
        }
    ]
}

当我使用用户名"log"通过shell连接到数据库时，它会返回success，就像这样:

[jboss@chonggouapp mongodb]$ mongo logMonitor -u "log" -p "log"

MongoDB shell version: 3.0.6

connecting to: logMonitor

然而，使用以下代码通过Java连接失败。

    ServerAddress addr = new ServerAddress("10.46.20.65", 27017);
    
    MongoCredential credential = MongoCredential.createMongoCRCredential(
            "log", "logMonitor", "log".toCharArray());
    
    MongoClientOptions options = MongoClientOptions.builder()
            .serverSelectionTimeout(1000)
            .build();
    MongoClient mongoClient = new MongoClient(addr, Arrays.asList(credential), options);
    
    MongoDatabase db = mongoClient.getDatabase("logMonitor");
    
    long c = db.getCollection("sysLog").count();

以下异常被触发：

Exception in thread "main" com.mongodb.MongoTimeoutException: Timed out after 1000 ms while waiting for a server that matches ReadPreferenceServerSelector{readPreference=primary}. Client view of cluster state is {type=UNKNOWN, servers=[{address=10.46.20.65:27017, type=UNKNOWN, state=CONNECTING, exception={com.mongodb.MongoSecurityException: Exception authenticating}, caused by {com.mongodb.MongoCommandException: Command failed with error 18: 'auth failed' on server 10.46.20.65:27017. The full response is { "ok" : 0.0, "errmsg" : "auth failed", "code" : 18 }}}]
    at com.mongodb.connection.BaseCluster.createTimeoutException(BaseCluster.java:370)
    at com.mongodb.connection.BaseCluster.selectServer(BaseCluster.java:101)
    at com.mongodb.binding.ClusterBinding$ClusterBindingConnectionSource.<init>(ClusterBinding.java:75)
    at com.mongodb.binding.ClusterBinding$ClusterBindingConnectionSource.<init>(ClusterBinding.java:71)
    at com.mongodb.binding.ClusterBinding.getReadConnectionSource(ClusterBinding.java:63)
    at com.mongodb.operation.CommandOperationHelper.executeWrappedCommandProtocol(CommandOperationHelper.java:65)
    at com.mongodb.operation.CountOperation.execute(CountOperation.java:172)
    at com.mongodb.operation.CountOperation.execute(CountOperation.java:43)
    at com.mongodb.Mongo.execute(Mongo.java:738)
    at com.mongodb.Mongo$2.execute(Mongo.java:725)
    at com.mongodb.MongoCollectionImpl.count(MongoCollectionImpl.java:167)
    at com.mongodb.MongoCollectionImpl.count(MongoCollectionImpl.java:147)
    at com.baosight.bsfc4.mn.lg.utils.Test.main(Test.java:34)

有人能告诉我问题出在哪里吗？我的 Java 代码有什么问题吗？

谢谢。

- Yuanping Wu

---

机器是否在指定的IP地址上侦听，还是仅在本地主机上侦听？您应该检查mongDB配置文件中的“bind_address”。 - rzo1

Answer 1

请使用createMongoCredential()代替，它会为您创建正确类型的凭据。

- evanchooly

---

就像你所说的那样，我使用了MongoCredential.createCredential()，它起作用了。 - Yuanping Wu

Answer 2

解决方案：

需要为该用户提供dbAdmin角色。

db.grantRolesToUser("Username", [{ "role" : "dbAdmin", "db" : "DBName" }])

- Uzzal Basak

Answer 3

请查看不同种类的方法：http://api.mongodb.com/java/current/com/mongodb/MongoCredential.html

尝试使用

createCredential(String userName, String database, char[] password)

代替

createMongoCRCredential(String userName, String database, char[] password)

后面这个使用挑战-响应协议，这可能不被你的MongoDB支持/授权。

String user="dfasdfgsdfg";
    String database="odhah";
    char[] password="dfgsdfg960".toCharArray();

    MongoCredential credential = MongoCredential.createCredential(user,
            database,
            password);
    MongoClient mongoClient = new MongoClient(new ServerAddress("125.025.125.2", 27017),
            Arrays.asList(credential));

    MongoDatabase db = mongoClient.getDatabase(database);
    MongoCollection<Document> collection = db.getCollection("names");
    System.out.println("connecting to host....."+mongoClient);
    System.out.println("connecting to database....."+collection);

    List<Document> foundDocument = collection.find(new Document("userId","124")).into(new ArrayList<Document>());
    for (int i=0;i<foundDocument.size();i++) {
        System.out.println(">>>"+foundDocument.get(i));

    }

- Ashish Pushp

Answer 4

完整的代码，考虑使用Java连接到MongoDB服务器实例时的身份验证，如下：

    //config is a class populating DB properties and credentials from a properties file

  List<ServerAddress> serverAddresses = new ArrayList<>();
    for (String node: config.getNodes()){
        serverAddresses.add( new ServerAddress(node) );
    }
    List<MongoCredential> credentials = new ArrayList<>();
    credentials.add(
            MongoCredential.createCredential(
                    config.getUser(),
                    config.getDb(),
                    config.getPassword().toCharArray()
            )
    );
    MongoClient mongo = new MongoClient( serverAddresses, credentials );
    db = mongo.getDatabase("hippo_reporting");
    collection = db.getCollection(config.getCollection());
// Now, we can do inserts etc...

- Nestor Milyaev