Account Options

  1. Sign in
The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Google Groups Home
« Groups Home
Message from discussion Backup with mongodump protecting the credentials
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Followup To:
Add Cc | Add Followup-to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers you hear
 
Spencer T Brody  
View profile  
 More options May 21 2012, 4:52 pm
From: Spencer T Brody <spen...@10gen.com>
Date: Mon, 21 May 2012 13:52:04 -0700 (PDT)
Local: Mon, May 21 2012 4:52 pm
Subject: Re: Backup with mongodump protecting the credentials

There is nothing like this built into MongoDB at this time.  You could
create a file with the username and password and encrypt it and have your
backup script decrypt the file and pass the results into mongodump, but
that still requires the backup script to have the password to decrypt the
file with the mongo credentials.  If you're worried about someone being
able to change the data if they get access to the credentials used by the
backup process, you could create a read-only user and use that for backups
instead.

On Monday, May 21, 2012 11:35:07 AM UTC-4, KCOtzen wrote:

> Security is very important in production deployment, so i was
> wondering if is there some option in mongodump for protecting the
> credentials?

> For instance, this is a normal use of mongodump:

> ./mongodump --host dbh46.excelsys.com --db mydb --collection user -u
> userbank -p secretpass

> In this case we expose username and password, that's not good.

> Is there something like this?--->http://blog.gazzang.com/blog/bid/
> 87472/Running-a-Secure-Encrypted-MySQL-Backup-Using-mysqldump-on-Linux<http://blog.gazzang.com/blog/bid/87472/Running-a-Secure-Encrypted-MyS...>

> where the credentials are encrypted and a file is used as follow:

> mysqldump –defaults-extra-file=/home/mfrank/protectedlogin.cnf –all-
> databases

> I would like to schedule the backups, so it's important to us protect
> the credentials.

> Thanks


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.