Book Image

MongoDB Administrator???s Guide

By : Cyrus Dasadia
Book Image

MongoDB Administrator???s Guide

By: Cyrus Dasadia

Overview of this book

MongoDB is a high-performance and feature-rich NoSQL database that forms the backbone of the systems that power many different organizations. Packed with many features that have become essential for many different types of software professional and incredibly easy to use, this cookbook contains more than 100 recipes to address the everyday challenges of working with MongoDB. Starting with database configuration, you will understand the indexing aspects of MongoDB. The book also includes practical recipes on how you can optimize your database query performance, perform diagnostics, and query debugging. You will also learn how to implement the core administration tasks required for high-availability and scalability, achieved through replica sets and sharding, respectively. You will also implement server security concepts such as authentication, user management, role-based access models, and TLS configuration. You will also learn how to back up and recover your database efficiently and monitor server performance. By the end of this book, you will have all the information you need—along with tips, tricks, and best practices—to implement a high-performance MongoDB solution.
Table of Contents (17 chapters)
Title Page
Credits
About the Author
About the Reviewers
www.PacktPub.com
Customer Feedback
Preface

Using key files to authenticate servers in a replica set


For the most part in this chapter, we have discussed how to authenticate and authorize users in MongoDB. However, it is also equally important to ensure that unwanted servers do not get attached to a closed system like replica sets.

In this recipe, we will look at how to achieve inter-server authentication within a MongoDB replica set using key files.

Getting ready

You only need standard MongoDB binaries.

How to do it...

  1. We begin by creating a key file using the openssl utility:
openssl rand -base64 756 > /data/keyfile
  1. Change the file permissions for the key file:
chmod 400 /data/keyfile
  1. Start the mongod replica set instances:
mongod --dbpath /data/server1/db --replSet MyReplicaSet --port 27017 --keyFile /data/keyfile
mongod --dbpath /data/server2/db --replSet MyReplicaSet --port 27018 --keyFile /data/keyfile
mongod --dbpath /data/server3/db --replSet MyReplicaSet --port 27019 --keyFile /data/keyfile
  1. Connect to the primary instance:
mongo localhost...