WebFaction
Community site: login faq

If I install MongoDB per the instructions at http://docs.webfaction.com/software/mongodb.html, do I need to use MongoDB's simplistic authentication setup to secure it? In other words, if I ran MongoDB in the recommended configuration (serving on localhost, no auth), would another user of the shared server be able to use a mongo shell to access my data?

asked 31 Mar '11, 20:18

carpie
312
accept rate: 0%


Hi,

Yes, if you are running it on a local TCP port then your data can be easily accessed by any other user. So. to ensure that does not happen I recommend using MongoDB auth.

Hope that helps!

permanent link

answered 31 Mar '11, 20:52

neeravk
1.5k3412
accept rate: 41%

Thanks. That is what I thought, but I wanted to make sure there wasn't some other insulating mechanism.

(04 Apr '11, 18:24) carpie

Another user on your account, or another user on webfaction? All users on your account will be able to access it, but I believe there's no way for another webfaction account to access a port served only to localhost.

permanent link

answered 01 Apr '11, 04:25

haard
15125
accept rate: 0%

Thanks for the response. I was referring to another user on the same shared server.

(04 Apr '11, 18:25) carpie

Can someone verify if a user on a separate account (same server) is able to connect to my mongod instance? I can verify that other users on the same account can connect.

I followed the same MongoDB instructions: http://docs.webfaction.com/software/mongodb.html

permanent link

answered 31 Dec '13, 14:52

jimbob007j
11
accept rate: 0%

edited 31 Dec '13, 15:21

Yes other users will be able to connect if you do not disable localhost access. This is because MongoDB on localhost bypasses authentication. The solution is to start the instance with this option: mongod --setParameter enableLocalhostAuthBypass=0

(31 Dec '13, 15:44) timg ♦♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×69
×29

question asked: 31 Mar '11, 20:18

question was seen: 3,675 times

last updated: 31 Dec '13, 15:44

WEBFACTION
REACH US
SUPPORT
AFFILIATE PROGRAM
LEGAL
© COPYRIGHT 2003-2019 SWARMA LIMITED - WEBFACTION IS A SERVICE OF SWARMA LIMITED
REGISTERED IN ENGLAND AND WALES 5729350 - VAT REGISTRATION NUMBER 877397162
5TH FLOOR, THE OLD VINYL FACTORY, HAYES, UB3 1HA, UNITED KINGDOM