Ensure Authentication is configured

KritisLevel 1Otomatismongodb

Deskripsi

This setting ensures that all clients, users, servers are required to authenticate before being granted access to the MongoDB database. Authentication is the process of verifying the identity of a client. When access control, i.e. authorization, is enabled, MongoDB requires all clients to authenticate themselves in order to determine their access. Checks the YAML config file /etc/mongod.conf (SKIP when it does not exist).

Cara pemeriksaan

Metode audit: Pola file

File: /etc/mongod.conf
Pola: (?m)^[ \t]*authorization:[ \t]*['\x22]?enabled\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Create a user administrator first (use admin; db.createUser({user: '<admin>', pwd: passwordPrompt(), roles: [{role: 'userAdminAnyDatabase', db: 'admin'}]})), then set 'security: authorization: enabled' in /etc/mongod.conf and restart mongod.

Properti

Sistem operasi: Apa saja
Tag: mongodbauthentication
Referensi: CIS MongoDB 8 Benchmark v2.0.0 - 2.1 Ensure Authentication is configured

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target mongodb