Configuring only x509 authentication

[dheepakraj_govindarajan]

Entries from my config file:
net:
port: 27017
bindIp: 127.0.0.1
tls:
mode: requireTLS
certificateKeyFile: D:\certnew\MongoDb\Test3\test-server.pem
CAFile: D:\certnew\MongoDb\Test3\test-ca.pem

security:
authorization: enabled
clusterAuthMode: x509

Trying to connect with server Certificate:
mongosh --tls --tlsCertificateKeyFile D:\certnew\MongoDb\Test3\test-server.pem --tlsCAFile D:\certnew\MongoDb\Test3\test-ca.pem

Trying to connect with Client Certificate:
mongosh --tls --tlsCertificateKeyFile D:\certnew\MongoDb\Test3\test-client.pem --tlsCAFile D:\certnew\MongoDb\Test3\test-ca.pem

Trying to connect with x509 Auth:
mongosh --tls --tlsCertificateKeyFile D:\certnew\MongoDb\Test3\test-client.pem --tlsCAFile D:\certnew\MongoDb\Test3\test-ca.pem --authenticationDatabase ‘$external’ --authenticationMechanism MONGODB-X509

I am able to connect in all these above mentioned methods but I want only x509 authentication and other methods should not be allowed.

[chris (Chris Dellaway)]

Hi @dheepakraj_govindarajan

Please format posts correctly for code and log extracts:

Formatting code and log snippets in posts

If you are including code and log snippets in a post, consider if there are ways to make these more readable using some of the available formatting options. Well formatted posts will help other users understand and engage with your discussion. Some quick tips for improved formatting: Include short code and log snippets as inline text rather than images. Text is searchable for other users who might encounter a similar issue or need the exact text to help investigate the issue you are experien…

As to:

@dheepakraj_govindarajan

I am able to connect in all these above mentioned methods but I want only x509 authentication and other methods should not be allowed.

The parameter authenticationMechanisms will have to be set to MONGODB-X509 , the default is SCRAM-SHA-1, SCRAM-SHA-256 and MONGODB-X509
https://www.mongodb.com/docs/manual/reference/parameters/#mongodb-parameter-param.authenticationMechanisms

setParameter:
   authenticationMechanisms: MONGODB-X509