Login authentication vanished from MongoDB install
Posted
by
Robert Oschler
on Server Fault
See other posts from Server Fault
or by Robert Oschler
Published on 2013-11-11T21:20:13Z
Indexed on
2013/11/11
21:56 UTC
Read the original article
Hit count: 240
A few months ago I enabled password protection on my MongoDB install. Today I ran the Mongo client and forgot to use my login details. Instead of rejecting nearly everything I try to do from the shell, like it should, I had complete access to all the databases and collections. Fortunately this instance is only running a few test apps, so I quickly shutdown the MongoD instance until I figure this out.
Has anybody ever seen this kind of behavior before and knows what is going on? The MongoD instance is running on a Linux VM hosted by Azure. The only thing I can think of is that perhaps Azure restored an old copy of the VM, but I received no E-mails to that effect and everything else on the server seems to be proper, including new daemon processes that I added after I enabled password protection on MongoD.
© Server Fault or respective owner