Login authentication vanished from MongoDB install

Posted by Robert Oschler on Server Fault See other posts from Server Fault or by Robert Oschler
Published on 2013-11-11T21:20:13Z Indexed on 2013/11/11 21:56 UTC
Read the original article Hit count: 240

A few months ago I enabled password protection on my MongoDB install. Today I ran the Mongo client and forgot to use my login details. Instead of rejecting nearly everything I try to do from the shell, like it should, I had complete access to all the databases and collections. Fortunately this instance is only running a few test apps, so I quickly shutdown the MongoD instance until I figure this out.

Has anybody ever seen this kind of behavior before and knows what is going on? The MongoD instance is running on a Linux VM hosted by Azure. The only thing I can think of is that perhaps Azure restored an old copy of the VM, but I received no E-mails to that effect and everything else on the server seems to be proper, including new daemon processes that I added after I enabled password protection on MongoD.

© Server Fault or respective owner

Related posts about authentication

Related posts about Azure