MongoDB 分片集群修改管理员密码

---

MongoDB分片集群主机规划：

主机名称	主机IP	CPU	内存	mongos端口	config端口	share1端口	share2端口	share3端口	操作系统及软件版本
mongodb01	192.168.91.61	2*4	16GB	27017	27019	27101	27102	27103	CentOS 7.9 mongo 4.4.29 mongos 4.4.29 mongod 4.4.29 mongosh 2.2.29
mongodb02	192.168.91.62	2*4	16GB	27017	27019	27101	27102	27103	CentOS 7.9 mongo 4.4.29 mongos 4.4.29 mongod 4.4.29 mongosh 2.2.29
mongodb03	192.168.91.63	2*4	16GB	27017	27019	27101	27102	27103	CentOS 7.9 mongo 4.4.29 mongos 4.4.29 mongod 4.4.29 mongosh 2.2.29

---

一、注释MongoDB分片集群认证参数（三台主机都要操作）

1、停止MongoDB分片集群所有容器

systemctl stop mongos
systemctl stop shard3
systemctl stop shard2
systemctl stop shard1
systemctl stop mongodsystemctl status mongos
systemctl status shard3
systemctl status shard2
systemctl status shard1
systemctl status mongod

2、注释用户认证参数

[root@epmongodb01 ~]#vim /data/mongodb/configsvr/conf/configsvr.conf
#security:
#  keyFile: /data/mongodb/keyfile/keyfile
#  authorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/shard1/conf/shard1.conf
#security:
#  keyFile: /data/mongodb/keyfile/keyfile
#  authorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/shard2/conf/shard2.conf
#security:
#  keyFile: /data/mongodb/keyfile/keyfile
#  authorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/shard3/conf/shard3.conf
#security:
#  keyFile: /data/mongodb/keyfile/keyfile
#  authorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/mongos/conf/mongos.conf
#security:
#  keyFile: /data/mongodb/keyfile/keyfile

3、启动MongoDB分片集群所有容器

systemctl start mongod
systemctl start shard1
systemctl start shard2
systemctl start shard3
systemctl start mongossystemctl status mongod
systemctl status shard1
systemctl status shard2
systemctl status mongos

4、验证MongoDB分片conf服务、shared1、shared2、shared3是否不需要用户和密码登录

### 验证conf服务
mongosh --host 192.168.91.61 --port 27017
show dbs
exit### 验证shared1服务
mongosh --host 192.168.91.61 --port 27101
show dbs
exit### 验证shared2服务
mongosh --host 192.168.91.61 --port 27102
show dbs
exit### 验证shared3服务
mongosh --host 192.168.91.61 --port 27103
show dbs
exit

---

二、修改MongoDB分片集群管理员密码

提示：MongoDB分片集群可以修改管理员密码，也可以删除掉原来的管理员再重新创建新的管理员。

1、修改config服务主节点管理员密码

mongosh --host 192.168.91.61 --port 27019use admin 
db.system.users.find();db.changeUserPassword('root','123456');
db.auth('root','123456')

2、修改shared1分片主节点管理员密码

mongosh --host 192.168.91.61 --port 27101use admin 
db.system.users.find();db.changeUserPassword('root','123456');
db.auth('root','123456')

3、修改shared2分片主节点管理员密码

mongosh --host 192.168.91.61 --port 27102use admin 
db.system.users.find();db.changeUserPassword('root','123456');
db.auth('root','123456')

4、修改shared3分片主节点管理员密码

mongosh --host 192.168.91.61 --port 27103use admin 
db.system.users.find();db.changeUserPassword('root','123456');
db.auth('root','123456')

---

三、去掉MongoDB分片集群认证参数注释（三台主机都要操作）

1、停止MongoDB分片集群所有容器

systemctl stop mongos
systemctl stop shard3
systemctl stop shard2
systemctl stop shard1
systemctl stop mongodsystemctl status mongos
systemctl status shard3
systemctl status shard2
systemctl status shard1
systemctl status mongod

2、去掉注释用户认证参数

[root@epmongodb01 ~]#vim /data/mongodb/configsvr/conf/configsvr.conf
security:keyFile: /data/mongodb/keyfile/keyfileauthorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/shard1/conf/shard1.conf
security:keyFile: /data/mongodb/keyfile/keyfileauthorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/shard2/conf/shard2.conf
security:keyFile: /data/mongodb/keyfile/keyfileauthorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/shard3/conf/shard3.conf
security:keyFile: /data/mongodb/keyfile/keyfileauthorization: enabled[root@epmongodb01 ~]#vim /data/mongodb/mongos/conf/mongos.conf
security:keyFile: /data/mongodb/keyfile/keyfile

3、启动MongoDB分片集群所有容器

systemctl start mongod
systemctl start shard1
systemctl start shard2
systemctl start shard3
systemctl start mongossystemctl status mongod
systemctl status shard1
systemctl status shard2
systemctl status mongos

4、验证MongoDB分片conf服务、shared1、shared2、shared3使用用户和密码登录

### 验证conf服务
mongosh --host 192.168.91.61 --port 27017 -u root –p 123456
show dbs
exit### 验证shared1服务
mongosh --host 192.168.91.61 --port 27101 -u root –p 123456
show dbs
exit### 验证shared2服务
mongosh --host 192.168.91.61 --port 27102 -u root –p 123456
show dbs
exit### 验证shared3服务
mongosh --host 192.168.91.61 --port 27103 -u root –p 123456
show dbs
exit