Not authorized for query on admin.system.namespaces on mongodb

Question

I start a new mongo instance, create a user, authorize it, but when I run "show collections", the system says that the id is not authorized. I do not know why?

# mongo admin
MongoDB shell version: 2.4.3
connecting to: admin
Server has startup warnings:
Thu May 23 18:23:56.735 [initandlisten]
Thu May 23 18:23:56.735 [initandlisten] ** NOTE: This is a 32 bit MongoDB binary.
Thu May 23 18:23:56.735 [initandlisten] **       32 bit builds are limited to less than 2GB of data (or less with --journal).
Thu May 23 18:23:56.735 [initandlisten] **       See http://dochub.mongodb.org/core/32bit
Thu May 23 18:23:56.735 [initandlisten]
> db = db.getSiblingDB("admin")
admin
> db.addUser({user:"sa",pwd:"sa",roles:["userAdminAnyDatabase"]})
{
        "user" : "sa",
        "pwd" : "75692b1d11c072c6c79332e248c4f699",
        "roles" : [
                "userAdminAnyDatabase"
        ],
        "_id" : ObjectId("519deedff788eb914bc429b5")
}
> show collections\
Thu May 23 18:26:50.103 JavaScript execution failed: SyntaxError: Unexpected token ILLEGAL
> show collections
Thu May 23 18:26:52.418 JavaScript execution failed: error: {
        "$err" : "not authorized for query on admin.system.namespaces",
        "code" : 16550
} at src/mongo/shell/query.js:L128
> db.auth("sa","sa")
1
> show collections
Thu May 23 18:27:22.307 JavaScript execution failed: error: {
        "$err" : "not authorized for query on admin.system.namespaces",
        "code" : 16550
} at src/mongo/shell/query.js:L128

score 13 · Answer 1 · answered Aug 14 '13 at 18:59

13

I had the same problem, but I found this tutorial and it helped me.

http://www.hacksparrow.com/mongodb-add-users-and-authenticate.html

use:

db.addUser('sa', 'sa')

instead of

db.addUser({user:"sa",pwd:"sa",roles:["userAdminAnyDatabase"]})
{
        "user" : "sa",
        "pwd" : "75692b1d11c072c6c79332e248c4f699",
        "roles" : [
                "userAdminAnyDatabase"
        ],
        "_id" : ObjectId("519deedff788eb914bc429b5")
}

answered Aug 14 '13 at 18:59

Vityka

131
1
4

This solved my problem and i've to say that this could be the perfect example of KISS (Keep It Simple, Stupid) coding – Max Feb 20 '16 at 12:33

score 8 · Answer 2 · answered Aug 01 '14 at 17:45

As Robert says, admin users has only rights to admin, not to write in databases. So you have to create a custom user for your database. There's different ways. I have choose the dbOwner way.

(I use Ubuntu Server, mongo 2.6.3 and Robomongo)

So to do this, fisrt create your admin user like mongo says :

type mongo in your linux shell

and these command in the mongo shell :

use admin
db.createUser({user:"mongoadmin",pwd:"chooseyouradminpassword",roles:[{role:"userAdminAnyDatabase",db:"admin"}]})
db.auth("mongoadmin","chooseyouradminpassword")
exit

edit the mongo conf file with :

nano /etc/mongod.conf

You can use vi if nano is not installed.

activate authentication by uncommented/adding these line auth=true

if you want to use Robomongo from other machine change the line bind_ip=127.0.0.1 by bind_ip=0.0.0.0 (maybe you should add more protection in production).

type in linux shell :

service mongod restart
mongo

And in mongo shell :

use admin
db.auth("mongoadmin","pwd:"chooseyouradminpassword")
use doomnewdatabase
db.createUser({user:"doom",pwd:"chooseyourdoompassword",customData:{desc:"Just me as I am"},roles : [{role:"dbOwner",db:"doomnewdatabase"}]})
db.auth("doom","chooseyourdoompassword")
show collections

(customData is not required).

If you want to try if it works, type this in the mongo shell :

db.products.insert( { item: "card", qty: 15 } )
show collections
db.products.find()

Good luck ! Hope it will help you and others !

I have search this informations for hours.

Awesome :) the most complete answer about setting up auth ever seen — mcont, Mar 29 '15 at 09:24
@matteo : your comment goes directly to my heart... hope my answer helps you. thanks. — doom, Mar 29 '15 at 18:03

score 7 · Answer 3 · edited Jan 10 '14 at 17:18

7

I had the same problem and this is how I solved it:

db = db.getSiblingDB('admin')
db.addUser( 
    { user: "mongoadmin", 
      pwd: "adminpass", 
      roles: ['clusterAdmin', 'userAdminAnyDatabase', 'readAnyDatabase'] } )

edited Jan 10 '14 at 17:18

Aaron

55,518
11
116
132

answered Sep 12 '13 at 17:57

Nick De Greek

1,834
1
18
19

score 4 · Answer 4 · edited Jul 15 '14 at 15:16

4

For MongoDB version 2.6 use:

db.createUser(
{
   user: "testUser"
   pwd: "password",
   roles: [{role: "readWrite", db:"yourdatabase"}]
})

See the docs

edited Jul 15 '14 at 15:16

John Powell

12,253
6
59
67

answered Jul 15 '14 at 14:57

hasib32

835
1
13
31

This answer is accurate, but note, the OP was using version 2.4.3. – John Powell Jul 15 '14 at 15:17

score 1 · Answer 5 · answered Jul 21 '15 at 05:48

1

I solved it like so for mongoDB 2.6 + currently 3

db.createUser(
  {
    user: "username",
    pwd: "password",
    roles: [ { role: "root", db: "admin" } ]
  }
)

note that for the role filed instead of userAdminAnyDatabase we use root

answered Jul 21 '15 at 05:48

Mohsen Shakiba

1,762
3
22
41

score 0 · Answer 6 · answered May 23 '13 at 02:50

0

I would try granting the read role to the user. userAdminAnyDatabase grants the ability to administer users.

answered May 23 '13 at 02:50

Robert Gannon

253
4
13

Not authorized for query on admin.system.namespaces on mongodb

6 Answers6

Linked