Improved password-based authentication in MongoDB 3.0: SCRAM Explained (Part 2)

Feb 6, 2015

In MongoDB 3.0, SCRAM is now the default password-based authentication mechanism. In the first post in this series, we introduced the threat-model SCRAM is designed to counter, and explained the inner workings of the protocol. Now we can take a closer look at how SCRAM addresses the attacks that follow from this threat-model. For a more detailed discussion, please see the Security...

Read More >

Capacity Planning and Hardware Provisioning for MongoDB In Ten Minutes

Chad Tindel
Feb 3, 2015

Most MongoDB deployments run on a cluster of multiple servers. This may introduce capacity planning and provisioning complexities beyond that of traditional databases. Solution Architect Chad Tindel’s Hardware Provisioning presentation from MongoDB World describes some best practices for operations teams sizing their MongoDB deployments.

There are two important concepts related to MongoDB’s...

Read More >

Improved Password-Based Authentication in MongoDB 3.0: SCRAM Explained - Pt. 1

Feb 2, 2015

MongoDB 3.0 features a new password authentication mechanism called Salted Challenge Response Authentication Mechanism or SCRAM (see RFC5802). MongoDB 3.0 uses SCRAM as the default authentication mechanism, replacing MONGODB-CR.

In this article we will give an overview of the motivations behind SCRAM's design, a basic analysis of its security properties, and a tutorial on how to use it in...

Read More >

Announcing MongoDB 3.0

Eliot Horowitz
Feb 2, 2015

Today we are announcing MongoDB 3.0. This release marks the beginning of a new phase in which we build on an increasingly mature foundation to deliver a database so powerful, flexible, and easy to manage that it can be the new DBMS standard for any team, in any industry.

MongoDB 3.0 brings with it massive improvements to performance and scalability, enabled by comprehensive improvements in the...

Read More >

DVLA Digitizes Vital Great Britain Driving License Data and Makes it Available Online With MongoDB

Feb 2, 2015

How many points do you have on your license and when do they expire?

This question has most drivers from Great Britain reaching for the paper part of their license (also called counterpart license which, in the UK, is a paper document that lists how many points someone has left) to check the details and see where they stand. That’s if they have any idea where it is, of course.

However, the ...

Read More >

Introducing the Legacy C++ Driver 1.0

Jan 29, 2015

The C/C++ Driver team at MongoDB is pleased to announce the 1.0 release of the legacy C++ driver. The legacy C++ driver provides a (mostly) compatible interface to previous releases of the C++ driver with many bugfixes, additional features, and a simplified implementation. In this post we will explain the reasons for creating the legacy C++ driver, the major improvements it offers, and our...

Read More >

MongoDB and the MEAN Stack: Optimizing an Example Application

Jan 28, 2015

Join us for the story of a fictional startup using MongoDB and the rest of the MEAN stack to build a geo-location based app. At MongoDB we want to ensure that all our technical new hires become subject matter experts with our technology before they begin to contribute. Part of this effort is a 3-4 week “bootcamp” project focused on a real implementation with MongoDB, where we build an app with...

Read More >

MongoDB LDAP and Kerberos Authentication with Dell (Quest) Authentication Services

Alex Komyagin
Jan 27, 2015

By Alex Komyagin @MongoDB with the help of Kyle Robinson @Dell
January 2015, NYC


Dell (formerly Quest) identity and access management software helps to solve security and administration issues inherent in Unix-based systems. The Privileged Access Suite product consolidates and unifies Unix, Linux, and Mac OS X identities, giving users centralized authentication and single sign-on with...

Read More >

Introducing the Database Selection Matrix

Jan 27, 2015

For the better part of a generation, the database landscape had changed very little. No one could say “this is not your father’s database.” They had become, in a word, boring.

Then a combination of factors catalyzed an era of innovation in database technologies: cheap storage and compute resources; pervasive connectivity; social networks; smartphones; the proliferation of sensors; open source...

Read More >

Leaf in the Wild: Qihoo Scales with MongoDB

Jan 23, 2015

100+ apps, 1,500+ Instances, 20B Queries per Day

Qihoo is China’s number 1 Android mobile distribution platform. Qihoo is also China’s top malware protection company, providing products for both web and mobile platforms. A MongoDB user since 2011, Qihoo has built over 100 different applications on MongoDB – including new services and migrations from MySQL and Redis – running on 1,500+ instances...

Read More >