Backup with mongodump protecting the credentials

XMLWordPrintableJSON

    • Type: New Feature
    • Resolution: Incomplete
    • Priority: Critical - P2
    • None
    • Affects Version/s: 2.1.1
    • Component/s: Security
    • Environment:
      Windows and Linux (64 bits)
    • None
    • 0
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      Security is very important in production deployment, let's see how do we execute a dump in mongoDB

      ./mongodump --host dbh85.test.com --db mydatabase --collection user -u username1 -p ultrasecretpass

      In this case we expose username and password, that's not good.

      we could have 2 problems if some intruder get this credencials:
      *data changes
      *data theft

      Data changes would be cover with read-only users, but I still have the data theft problem.

      mysql has a -defaults-extra-file option which is very useful for theses cases, for instance:

      mysqldump defaults-extra-file=/home/daniel/protectedlogin.cnf -all databases

      where protectedlogin.cnf contains the credentials encrypted.

              Assignee:
              Unassigned
              Reporter:
              Carlos Astudillo B.
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: