Connect ABS to MongoDB.
-
Check and open the MongoDB default port.
Note:
The MongoDB default port for connection with ABS is 27017.
- Run the check_ports_abs.sh script on the ABS machine to determine whether the default port is available.
-
Input the MongoDB host IP address and default port as arguments.
/opt/pingidentity/abs/util ./check_ports_abs.sh {MongoDB IPv4:[port]}
- Run the script for the MongoDB master and slave. If the default ports are not accessible, open the port from the MongoDB machine.
-
Configure ABS to connect to MongoDB.
-
Edit abs_init.js in the
/opt/pingidentity/mongo directory to set the key
values.
Below is a sample abs_init.js file:
db.auth_info.insert({ "access_key" : "abs_ak", "secret_key" : "abs_sk" });
Note:":" (colon) is a restricted character and not allowed in the access key or secret key.
Note: Do not edit the abs_init.js file for any subsequent changes to the ABS access key and secret key. It is recommended to use the update_keys CLI command to change the keys. For more information, see ABS CLI commands. - Copy the abs_init.js file from the ABS /opt/pingidentity/abs/mongo folder to the MongoDB system /opt/pingidentity/mongo folder.
-
At the MongoDB command prompt, update the MongoDB settings with the latest
abs_init.js file.
# mongo admin -u absuser -p abs123 < /opt/pingidentity/abs/mongo/abs_init.js MongoDB Shell version 5.0.18 connecting to: admin switched to db abs_metadata WriteResult({ “nInserted” : 1}) bye
-
Edit abs_init.js in the
/opt/pingidentity/mongo directory to set the key
values.
- Optional:
To verify MongoDB SSL certificates, configure ABS to verify the validity of the
MongoDB server certificate.
- Set the mongo_certificate parameter in the /<pi_install_path>/pingidentity/abs/config/abs.properties file.
Note:For more information, see Verify MongoDB SSL certificates.