Setting up authorization in Windows Server

12min
Connect and create a user in MongoDB
Connecting to shell
Run PowerShell as Administrator:
Right-click on the Start icon in the lower left corner of the screen;
Select Windows PowerShell (Administrator) from the context menu.
Connect to the MongoDB shell:
PowerShell
mongosh
mongosh
﻿
Shell connection error
If you receive the following error after executing the connect command:
PowerShell
mongosh : The term 'mongosh' is not recognized as the name of a cmdlet, function, script file, or operable program.
mongosh : The term 'mongosh' is not recognized as the name of a cmdlet, function, script file, or operable program.
﻿
Then it means that MongoDB administration utilities are not located in the $PATH environment variable, you must search for the mongosh.exe utility to connect:
PowerShell
$mongoshPath = Get-ChildItem -Path "C:\" -Filter "mongosh.exe" -Recurse -ErrorAction SilentlyContinue | Select-Object -First 1; $mongoshDirectory = $mongoshPath.DirectoryName; cd $mongoshDirectory
$mongoshPath = Get-ChildItem -Path "C:\" -Filter "mongosh.exe" -Recurse -ErrorAction SilentlyContinue | Select-Object -First 1; $mongoshDirectory = $mongoshPath.DirectoryName; cd $mongoshDirectory
﻿
If MongoDB and the administration utilities were installed on a non-standard drive, you need to change the search path in the -Path parameter.
Once executed, the current working directory will be changed to the one where the utility is located — mongosh.exe
Connect to the MongoDB shell:
PowerShell
.\mongosh.exe
.\mongosh.exe
﻿
Creating a user
Switch to the admin database:
Shell
use admin
use admin
﻿
Create a user by changing the Login (user) and Password (pwd) of the user:
Shell
db.createUser({
  user: "adminuser",
  pwd: "password",
  roles: [
    { role: "root", db: "admin" }
  ],
  passwordDigestor: "server"
})
db.createUser({
  user: "adminuser",
  pwd: "password",
  roles: [
    { role: "root", db: "admin" }
  ],
  passwordDigestor: "server"
})
﻿
In MongoDB, you cannot use the characters .,@,$,:,%,",',/,\,| in usernames and passwords, as this can cause issues with connection of the application server to MongoDB
If a MongoDB replica set is used, you must add the cluster manager role to the user:
Shell
db.grantRolesToUser(
   "adminuser",
   [ "clusterManager" ]
)
db.grantRolesToUser(
   "adminuser",
   [ "clusterManager" ]
)
﻿
Enable authorisation and connect Passwork
Enabling authorisation in MongoDB
You need to edit the MongoDB config file to enable authorisation, run the following commands in the shell to get the location:
Shell
var cmdLineOpts = db.serverCmdLineOpts();
print("config: " + cmdLineOpts.parsed.config);
var cmdLineOpts = db.serverCmdLineOpts();
print("config: " + cmdLineOpts.parsed.config);
﻿
Edit the resulting configuration file by adding a line:
Shell
security.authorization: enabled
security.authorization: enabled
﻿
Save the changes and restart the MongoDB service in PowerShell:
PowerShell
net stop MongoDB
net start MongoDB
net stop MongoDB
net start MongoDB
﻿
To test, connect to the shell with authorisation:
PowerShell
mongosh "mongodb://adminuser:password@localhost:27017"
mongosh "mongodb://adminuser:password@localhost:27017"
﻿
Setting up and connecting Passwork with authorization
You need to edit the [mongo] section of Passwork configuration file at /<passwork>/conf/keys/config.ini and specify the login and password of the created user:
Shell
[mongo]
connectionString = mongodb://localhost:27017
dbname = pwbox
useCreds = true
username = adminuser
password = password
[mongo]
connectionString = mongodb://localhost:27017
dbname = pwbox
useCreds = true
username = adminuser
password = password
﻿
Save the changes and refresh the Passwork page to test the connection with MongoDB authorisation.
Updated 25 Dec 2024
Did this page help you?
Setting up authorization in Linux
Examples of creating and restoring MongoDB backups