Re: Sharded Collection With Database-Level (non-admin) User Causes "unauthorized" error

[Ben Foster]

Sorry, didn't realize this was an all-mongodb list.  I should specifically point out that this is going through the Mongo-Hadoop Connector.

On Friday, July 27, 2012 1:17:38 PM UTC-4, Ben Foster wrote:

Hi all,

As mentioned in the subject line, we have a sharded collection, and the database is protected by username/password authentication.  The user accessing the database via mongo-hadoop is a database user, not an admin user.

During calculation of splits, I am getting an unauthorized error in MongoSplitter.fetchSplitsViaChunks().  The error occurs when running a query on the "chunks" collection of the "config" database.  While I cannot find any documentation to support this, from playing around it seems that only administrators can access the "config" database.  Can anyone confirm this, and/or offer some ideas to get around it?  I'm not sure that creating an admin account will fly in our environment.

Thanks!

[Scott Hernandez]

That is correct, only admins can access the config db when
authentication is enabled. I suspect the hadoop plugin does not work
correctly with authentication if you are not using an admin user. I
would suggest creating an issue in jira for this:
https://jira.mongodb.org/browse/hadoop

> --
> You received this message because you are subscribed to the Google
> Groups "mongodb-user" group.
> To post to this group, send email to mongod...@googlegroups.com
> To unsubscribe from this group, send email to
> mongodb-user...@googlegroups.com
> See also the IRC channel -- freenode.net#mongodb

[Ben Foster]

Thanks Scott.

For reference, it's posted at https://jira.mongodb.org/browse/HADOOP-43

On Friday, July 27, 2012 2:13:36 PM UTC-4, Scott Hernandez wrote:

That is correct, only admins can access the config db when
authentication is enabled. I suspect the hadoop plugin does not work
correctly with authentication if you are not using an admin user. I
would suggest creating an issue in jira for this:
https://jira.mongodb.org/browse/hadoop

[Robert Kennington]

Strange, you must have administrative rights to access https://jira.mongodb.org/browse/HADOOP-43

[Scott Hernandez]

Robert, that issue was reclassified because some private information
was posted. I will add another feature request to support using a
non-admin user with a sharded cluster with authentication, which I
assume is what you are interested in.

https://jira.mongodb.org/browse/HADOOP-46

[Robert Kennington]

Thanks Scott.