Connect ABS to MongoDB
Check and open MongoDB default port
The MongoDB default port for connection with ABS is 27017. Run the check_ports_abs.sh script on the ABS machine to determine whether the default port is available. Input the MongoDB host IP address and default port as arguments. For example:
/opt/pingidentity/abs/util ./check_ports_abs.sh {MongoDB IPv4:[port]}
Run the script for MongoDB master and slave. If the default ports are not accessible, open the port from the MongoDB machine.
Configure ABS to connect to MongoDB
ABS access key and secret key are used for MongoDB and REST API authentication. Edit abs_init.js in /opt/pingidentity/mongo directory to set the key values. Here is a sample abs_init.js file:
|
":" (colon) is a restricted character and not allowed in access key and secret key. |
db.auth_info.insert({
"access_key" : "abs_ak",
"secret_key" : "abs_sk"
});
|
Do not edit the |
Copy the abs_init.js file from ABS
/opt/pingidentity/abs/mongo
folder to the MongoDB system /opt/pingidentity/mongo folder.
At the MongoDB command prompt, update the MongoDB settings with the latest abs_init.js file.
# mongo admin -u absuser -p abs123 < /opt/pingidentity/abs/mongo/abs_init.js
MongoDB Shell version 4.2.0
connecting to: admin
switched to db abs_metadata
WriteResult({ “nInserted” : 1})
bye
Verify MongoDB SSL certificates
You can configure ABS to verify the validity of MongoDB server certificate, when ABS connects with MongoDB. This is an optional check which can be enabled by settingmongo_certificate parameter in /<pi_install_path>/pingidentity/abs/config/abs.properties file. For more information, see Verify MongoDB SSL certificates.