SCRAM
最后更新于
最后更新于
On this page
此页面
NOTE
Starting in version 4.0, MongoDB removes support for the deprecated MongoDB Challenge-Response (MONGODB-CR) authentication mechanism.
If your deployment has user credentials stored in MONGODB-CR schema, you must upgrade to SCRAM before you upgrade to version 4.0. For information on upgrading to SCRAM, see .
Salted Challenge Response Authentication Mechanism (SCRAM) is the default authentication mechanism for MongoDB. SCRAM is based on the IETF standard that defines best practices for implementation of challenge-response mechanisms for authenticating users with passwords.
Using SCRAM, MongoDB verifies the supplied user credentials against the user’s , and . The authentication database is the database where the user was created, and together with the user’s name, serves to identify the user.
注意 从4.0版本开始，MongoDB删除了对已弃用的MongoDB质询-响应(
MONGODB-CR)身份验证机制的支持。 如果您的部署有存储在MONGODB-CR模式中的用户凭证，您必须在升级到SCRAM_之前_升级到MongoDB4.0版本。有关升级到SCRAM的信息，请参阅 。 严肃的询问响应身份验证机制(SCRAM)是MongoDB的默认身份验证机制。SCRAM基于IETF 标准，该标准定义了实现询问-响应机制的最佳实践，用于对用户进行密码验证。 使用SCRAM，MongoDB验证所提供的用户凭证 , 和 。身份验证数据库是创建用户的数据库，它与用户名一起用于标识用户。
MongoDB’s implementation of SCRAM provides:
A tunable work factor (i.e. the iteration count),
Per-user random salts, and
Authentication of the server to the client as well as the client to the server.
MongoDB的SCRAM实现提供:
可调的工作因素(如：迭代计数)，
每个用户随机salts，和
服务器对客户端的认证，以及客户对服务器的认证。
MongoDB supports the following SCRAM mechanisms:
SCRAM-SHA-1
SCRAM-SHA-256
MongoDB支持如下SCRAM机制：
SCRAM-SHA-1
SCRAM-SHA-256
To use SCRAM, you must upgrade your driver if your current driver version does not support SCRAM.
The minimum driver versions that support SCRAM are:
如果您当前的驱动程序版本不支持SCRAM，您必须升级驱动程序才能使用SCRAM。 支持SCRAM的最小驱动程序版本如下所示:
译者：管祥青
Uses the SHA-1 hashing function.To modify the iteration count for SCRAM-SHA-1, see .
Uses the SHA-256 hashing function and requires featureCompatibilityVersion (fcv) set to 4.0.To modify the iteration count for SCRAM-SHA-256, see .New in version 4.0.
When creating or updating a SCRAM user, you can indicate the specific SCRAM mechanism as well as indicate whether the server or the client digests the password. When using SCRAM-SHA-256, MongoDB requires server-side password hashing, i.e. the server digests the password. For details, see and .
使用SHA-1哈希函数。要修改SCRAM-SHA-1的迭代计数，请参见 。
使用SHA-256哈希函数，并要求特性兼容版本(fcv) 设置为 4.0。修改SCRAM-SHA-256的迭代计数，参见 .新版本4.0.
在创建或更新SCRAM用户时，指示特定的SCRAM机制，以及指示是服务器还是客户端摘要密码。当使用SCRAM-SHA-256时，MongoDB需要服务器端密码散列，即服务器摘要密码。详细信息，请参见 和 。
英文原文地址：