Michael Edwards

In more recent versions of mongo (3.x) the user format has changed so now instead of just username and password you need roles and database resources also. So if you...

[root@bluesky-db-uat dbsave]# /opt/chef/embedded/bin/gem list --local *** LOCAL GEMS *** addressable (2.5.2, 2.4.0) appbundler (0.10.0) ast (2.3.0) bigdecimal (default: 1.3.0) binding_of_caller (0.7.2) blankslate (2.1.2.4) bson (1.12.5) bson_ext (1.12.5) builder (3.2.3) bundler...

@JJClements Are you including roles in your admin user creation as I suggested?

The OP error was for the user management cookbook (sc-mongodb::user_management) and this error has nothing to do with SSL If you are including that recipe (or it is a dependency...

@MaximKraev Assuming you're talking about the OP and not the SSL issue, you need to include "roles" and "database" entries for the admin user as I suggested above. > node.default['mongodb']['admin']['username']...

Oh, the default properties for my environment don't contain the properties added later, in case that was unclear.

roles and database being required should be updated in the documentation too, it is very unclear

This still doesn't work exactly how I would expect, you can still open mongo client without specifying a user, but at least you can't really do anything. So other options...

Using localhost exception would be fine to create initial admin user (or all of them I guess), but for defense in depth it should be disabled after that I would...

[root@bluesky-db-uat dbsave]# /opt/chef/embedded/bin/gem list --local *** LOCAL GEMS *** addressable (2.5.2, 2.4.0) appbundler (0.10.0) ast (2.3.0) bigdecimal (default: 1.3.0) binding_of_caller (0.7.2) blankslate (2.1.2.4) bson (1.12.5) bson_ext (1.12.5) builder (3.2.3) bundler...