Error: couldn't add user: not authorized on test to execute command { createUser:

Question

I'm starting with MongoDB and I would like to user/pass access to the dbs. The first thing I did was to create and admin user and start mongodb with auth activate, this is my created user:

db.getUser("admin")  {         "_id" : "admin.admin",         "user" : "admin",         "db" : "admin",         "roles" : [                 {                         "role" : "dbAdminAnyDatabase",                         "db" : "admin"                 },                 {                         "role" : "clusterAdmin",                         "db" : "admin"                 }         ] } } 

After that, I try to create users with the following commands:

use newdb db.createUser(   {     user: "newuser",     pwd: "12345678",     roles: [ { role: "readWrite", db: "newdb" } ]   } ) 

But I got this error:

Error: couldn't add user: not authorized on newdb to execute command { createUser: "newuser", pwd: "xxx", roles: [ { role: "readWrite", db: "newdb" } ], digestPassword: false, writeConcern: { w: "majority", wtimeout: 30000.0 } } at src/mongo/shell/db.js:1004

I have googled about it but there are only two results, one on Chinese and the other not related, so I'm a little lost. Any idea ? It looks like my admin user doesn't have privilege, I access to the mongodb with the following command:

$mongo --port 27017 -u adminUser -p adminPass  --authenticationDatabase admin 

Thanks in advance.

Answer 1

Stop the running instance of mongod mongod --config /usr/local/etc/mongod.conf --auth

then start without --auth like mongod --config /usr/local/etc/mongod.conf

then update your roles like

db.updateUser("admin",{roles : ["userAdminAnyDatabase","userAdmin","readWrite","dbAdmin","clusterAdmin","readWriteAnyDatabase","dbAdminAnyDatabase"]});

Now again start mongod with --auth and try.

---

The idea is you have to create user under "admin" database with all the ROLES mentioned above.

But this user is not part of other databases. So once you created the admin user,

then login as that admin user,

SERVER: mongod --config /usr/local/etc/mongod.conf --auth

CLIENT: ./mongodb/bin/mongo localhost:27017/admin -u adminUser -p 123456

use APPLICATION_DB 

again create a new user (say APP_USER) for this APPLICATION_DB. This time for this application user you need only "dbOwner" role.

db.createUser({user:"test", pwd:"test", roles:['dbOwner']}) 

Now your application has to use this APP_USER and APP_DB.

Answer 2

I fixed the same problem just exit and login as admin

mongo -u admin 

enter your admin user password

after login, create a user as usual you mentioned

use newdb db.createUser(   {     user: "newuser",     pwd: "12345678",     roles: [ { role: "readWrite", db: "newdb" } ]   } )