3

Hello I would appreciate any suggestions, I have a 3 member MongoDB replica set setup on CentOS I'm trying to configure wit access control:
node1, node2, arbiter,

When I do not configure security with access control to test each instance it works successfully. I didn't get as far to test replication, although I have tested in the past with no access control however I need it implemented.

I get an error and mongodb wont start with access control on. I've granted mongod account permissions "/srv/mongodb/mongodb-keyfile.key"
set chmod 600 as instructed by the docs.

The get the following messages in the logs but doesn't start:

2016-03-11T09:42:25.032-0800 I CONTROL  [main] ***** SERVER RESTARTED *****
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten] MongoDB starting : pid=8729 port=27000 dbpath=/var/lib/mongo/arb 64-bit host=arb
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten] db version v3.2.3
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten] git version: b326ba837cf6f49d65c2f85e1b70f6f31ece7937
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten] OpenSSL version: OpenSSL 1.0.1e-fips 11 Feb 2013
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten] allocator: tcmalloc
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten] modules: none
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten] build environment:
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten]     distmod: rhel62
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten]     distarch: x86_64
2016-03-11T09:42:25.094-0800 I CONTROL  [initandlisten]     target_arch: x86_64
2016-03-11T09:42:25.095-0800 I CONTROL  [initandlisten] options: { config: "/etc/mongod.conf", net: { bindIp: "127.0.0.1,192.222.21.3", port: 27000 }, processManagement: { fork: true, pidFilePath: "/var/run/mongodb/mongod.pid" }, storage: { dbPath: "/var/lib/mongo/arb", journal: { enabled: false }, mmapv1: { smallFiles: true } }, systemLog: { destination: "file", logAppend: true, path: "/var/log/mongodb/mongod.log" } }
2016-03-11T09:42:25.166-0800 I -        [initandlisten] Detected data files in /var/lib/mongo/arb created by the 'wiredTiger' storage engine, so setting the active storage engine to 'wiredTiger'.
2016-03-11T09:42:25.186-0800 I STORAGE  [initandlisten] wiredtiger_open config: create,cache_size=1G,session_max=20000,eviction=(threads_max=4),config_base=false,statistics=(fast),log=(enabled=true,archive=true,path=journal,compressor=snappy),file_manager=(close_idle_time=100000),checkpoint=(wait=60,log_size=2GB),statistics_log=(wait=0),,log=(enabled=false),
2016-03-11T09:42:25.677-0800 W STORAGE  [initandlisten] Detected configuration for non-active storage engine mmapv1 when current storage engine is wiredTiger
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten]
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten] ** WARNING: /sys/kernel/mm/transparent_hugepage/enabled is 'always'.
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten] **        We suggest setting it to 'never'
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten]
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten] ** WARNING: /sys/kernel/mm/transparent_hugepage/defrag is 'always'.
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten] **        We suggest setting it to 'never'
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten]
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten] ** WARNING: soft rlimits too low. rlimits set to 1024 processes, 65535 files. Number of processes should be at least 32767.5 : 0.5 times number of files.
2016-03-11T09:42:25.677-0800 I CONTROL  [initandlisten]
2016-03-11T09:42:25.741-0800 I FTDC     [initandlisten] Initializing full-time diagnostic data capture with directory '/var/lib/mongo/arb/diagnostic.data'
2016-03-11T09:42:25.742-0800 I NETWORK  [HostnameCanonicalizationWorker] Starting hostname canonicalization worker
2016-03-11T09:42:25.776-0800 I NETWORK  [initandlisten] waiting for connections on port 27808
2016-03-11T09:42:29.954-0800 I CONTROL  [signalProcessingThread] got signal 15 (Terminated), will terminate after current cmd ends
2016-03-11T09:42:29.954-0800 I FTDC     [signalProcessingThread] Shutting down full-time diagnostic data capture
2016-03-11T09:42:29.955-0800 I CONTROL  [signalProcessingThread] now exiting
2016-03-11T09:42:29.955-0800 I NETWORK  [signalProcessingThread] shutdown: going to close listening sockets...
2016-03-11T09:42:29.955-0800 I NETWORK  [signalProcessingThread] closing listening socket: 6
2016-03-11T09:42:29.955-0800 I NETWORK  [signalProcessingThread] closing listening socket: 7
2016-03-11T09:42:29.955-0800 I NETWORK  [signalProcessingThread] closing listening socket: 8
2016-03-11T09:42:29.955-0800 I NETWORK  [signalProcessingThread] removing socket file: /tmp/mongodb-27000.sock
2016-03-11T09:42:29.955-0800 I NETWORK  [signalProcessingThread] shutdown: going to flush diaglog...
2016-03-11T09:42:29.955-0800 I NETWORK  [signalProcessingThread] shutdown: going to close sockets...
2016-03-11T09:42:29.955-0800 I STORAGE  [signalProcessingThread] WiredTigerKVEngine shutting down
2016-03-11T09:42:30.014-0800 I STORAGE  [signalProcessingThread] shutdown: removing fs lock...
2016-03-11T09:42:30.014-0800 I CONTROL  [signalProcessingThread] dbexit:  rc: 0

I have followed steps up to the point confirming that all 3 hosts can "start up" as separate MongoDB instances https://docs.mongodb.org/manual/tutorial/enable-internal-authentication/#deploy-repl-set-with-auth

# mongod.conf
# Arbiter

# for documentation of all options, see:
#   http://docs.mongodb.org/manual/reference/configuration-options/

# where to write logging data.
systemLog:
  destination: file
  logAppend: true
  path: /var/log/mongodb/mongod.log

# Where and how to store data.
storage:
  dbPath: /var/lib/mongo/arb
  smallFiles: true
  journal:
    enabled: false
#  engine:
#  mmapv1:
#  wiredTiger:

# how the process runs
processManagement:
  fork: true  # fork and run in background
  pidFilePath: /var/run/mongodb/mongod.pid  # location of pidfile

# network interfaces
net:
  port: 27000
  bindIp: 127.0.0.1,192.222.21.3  # Listen to local interface only, comment to listen on all interfaces. I've changed the IP to mask it

# when the follow 3 lines below are commented out it works
security:
 keyFile:  "/srv/mongodb/mongodb-keyfile.key"
 authorization: true

#operationProfiling:

# commented out to test access control first
#replication:
#  oplogSizeMB: 1024
# replSetName: "rs1"

#sharding:

## Enterprise-Only Options

#auditLog:

#snmp:
Improve this question
0

1 Answer 1

Reset to default
1

I solved my issue by deleting and moving the section below and removing quotes, it's strange solved it. There must have been some hidden characters. Lesson learned delete you config and start over maybe.

# when the follow 3 lines below are commented out it works
security:
  keyFile:  /srv/mongodb/mongodb-keyfile.key
  authorization: true
Improve this answer
2
  • Hi Normoe - good that you got it working! If you solved your problem yourself, you should Accept this answer to take the question off the Unanswered list.
    – Vince Bowdren
    Commented Aug 18, 2016 at 16:18
  • Have the same problem trying to figure out why its not starting, btw, autorization is either "enabled" or "disabled" not boolean. docs.mongodb.com/manual/reference/configuration-options/…
    – Pykler
    Commented Jan 10, 2017 at 15:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.