mongo db docker image authentication failed

After some time, I figured out.

• On the same folder, create docker-compose.yml and init-mongo.js

docker-compose.yml

version: '3.7'
services:
  database:
    image: mongo
    container_name : your-cont-name
    command: mongod --auth
    environment:
      - MONGO_INITDB_DATABASE=my_db
      - MONGO_INITDB_ROOT_USERNAME=admin
      - MONGO_INITDB_ROOT_PASSWORD=root
    ports:
      - '27017-27019:27017-27019'
    volumes: 
      - mongodbdata:/data/db
      - ./init-mongo.js:/docker-entrypoint-initdb.d/mongo-init.js:ro
      
volumes:
  mongodbdata:
    driver: local

init-mongo.js

db.createUser(
    {
        user: "your_user",
        pwd: "your_password",
        roles: [
            {
                role: "readWrite",
                db: "my_db"
            }
        ]
    }
);
db.createCollection("test"); //MongoDB creates the database when you first store data in that database

Auth

First, execute the bash inside the container

docker exec -it your-cont-name bash

Now we can login. For the admin

mongo -u admin -p root

For the your_user you have to specify the db (with the --authenticationDatabase) otherwise you'll have an auth error

mongo -u your_user -p your_password --authenticationDatabase my_db

After that, you should switch to the right db with

use my_db

If you don't execute this command, you'll be on test db

Note

For being sure of having the right config, i prefer to

docker-compose stop
docker-compose rm
docker volume rm <your-volume>
docker-compose up --build -d

as stated in the Docs

These variables, used in conjunction, create a new user and set that user's password. This user is created in the admin authentication database and given the role of root, which is a "superuser" role.

so you need to add --authenticationDatabase admin to your command since the mongod will be started with mongod --auth

example:

mongo -u mongo -p asdfasdf --authenticationDatabase admin

i have the same issue, after google two hours finally sovled; solution：find out the host machine direcory mounted into mongodb container, delete it,then re-create the mongodb container.

mongo db container create by docker-compose.yaml mount a diretory from host mechine to the container for save the mongo datbases. when you remove the container the mouted direcotry do not deleted, so the default username and password pass by env var could be long time ago you set, now you change the user name and password. just do not work,cause recreate the container will not recreate the "admin" database .

I had the same problem myself,

Please first remove the username and password from credentials.

environment:
      MONGO_INITDB_ROOT_USERNAME: mongo
      MONGO_INITDB_ROOT_PASSWORD: asdfasdf

after you remove the credentials you may check dbs or users on your mongodb.

show dbs
show users

Those commands also needs auth, so if you can see them, can be null, then you fix your issue.

Than, then create a admin user,

use admin
db.createUser({user: "root", pwd: "root", roles:["root"]})

then you can logout and try to connect with credentials to the shell as an admin.

In addition if you are still having some issues about creating new user, In my case I changed mechanisms to SCRAM-SHA-1 than it worked like a charm.

{
  user: "<name>",
  pwd: passwordPrompt(),      // Or  "<cleartext password>"
  customData: { <any information> },
  roles: [
    { role: "<role>", db: "<database>" } | "<role>",
    ...
  ],
  authenticationRestrictions: [
     {
       clientSource: ["<IP>" | "<CIDR range>", ...],
       serverAddress: ["<IP>" | "<CIDR range>", ...]
     },
     ...
  ],
  mechanisms: [ "<SCRAM-SHA-1|SCRAM-SHA-256>", ... ],
  passwordDigestor: "<server|client>"
}

I've fallen in this trap and wasted a day while everything was correct.

I'm writing this for future me(s) because it wasn't mentioned anywhere else and also to avoid my mistake while setting up user/pass combination to connect to their database from other services.

Assuming everything is right:

If you are mounting some local folder of yours as storage for your database like below:

services:
  your_mongo_db:
    // ...some config

    volumes:
      - ./__TEST_DB_DATA__:/data/db
      - ./init-mongo.js:/docker-entrypoint-initdb.d/mongo-init.js:ro
    environment:
      - "MONGO_INITDB_ROOT_USERNAME=root"
      - "MONGO_INITDB_ROOT_PASSWORD=pass"

    //...more config

Please remember to remove this folder before re-running your compose file. I think when you run the docker-compose command for the first time, Mongo will create and store the user data there (like any other collections) and then reuse it for the next time (since you mounted that volume).