November 2021
Intermediate to advanced
410 pages
12h 1m
Chinese
Content preview from MongoDB权威指南（第3版）
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
318
第 19章
MongoDB
安全介绍
为了保护
MongoDB
集群及其中的数据，可以采用以下安全措施：
•
启用授权并执行身份验证；
•
对通信进行加密；
•
对数据进行加密。
本章通过使用
MongoDB
对
x.509
的支持来配置身份验证和传输层加密
，以确保
MongoDB
副本集中客户端和服务器端之间的安全通信作为例子，演示了如何解决前两个安全问题。
第
20
章会讨论如何在存储层对数据进行加密。
19.1
MongoDB
的身份验证和授权
虽然身份验证和授权紧密相连，但明白二者的不同十分重要。身份验证的目的是验证用户
的身份，而授权的目的是确定被验证用户对资源和操作的访问权限。
19.1.1
身份验证机制
在
MongoDB
集群上启用授权会强制进行验证，并确保用户只能执行授权的操作，这是由
用户的角色决定的。
MongoDB
的社区版
本提供了对
SCRAM
（
Salted Challenge Response
Authentication Mechanism
）和
x.509
证书验证的支持
。除了
SCRAM
和
x.509
，
MongoDB
企业版还支持
Kerberos
身份验证和
LDAP
代理身份验证
。有关
MongoDB
所支持的各种身
份验证机制的详细信息，请参阅相关文档。本章会重点讨论
x.509
身份验证
。
x.509
数字证
书使用了被广泛接受的
x.509
公钥基础设施（
PKI
）标准来验证公钥的所有人。
MongoDB
安全介绍
｜
319
19.1.2
授权
在
MongoDB
中添加用户时，必须在指定的数据库中创建此用户。该数据库是针对此用户
的身份验证数据库 ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.