openssl rand -base64 753  > keyfile
sudo chmod 400 keyfile

use admin
db.createUser({user: "admin",pwd: "123456",roles: [ { role: "root", db: "admin" } ]}) #root所有权限
db.auth("admin","123456")use config
db.createUser({user: "admin",pwd: "123456",roles: [ { role: "root", db: "admin" } ]}) #root所有权限
db.auth("admin","123456")

[mongo@mongo3 ~]$ vi services/configsvr/mongod.conf

#mongod.conf 添加以下配置
security:authorization: enabled  #若启动实例报错，可删除该行keyFile: /home/mongo/services/keyfile

[mongo@mongo3 ~]$ ./mongod -f services/configsvr/mongod.conf 

[mongo@mongo3 ~]$ vi services/shard1/mongod.conf#mongod.conf 添加以下配置
security:authorization: enabled  #若启动实例报错，可删除该行keyFile: /home/mongo/services/keyfile[mongo@mongo3 ~]$ ./mongod -f services/shard1/mongod.conf[mongo@mongo1 ~]$ vi services/shard2/mongod.conf#mongod.conf 添加以下配置
security:authorization: enabled  #若启动实例报错，可删除该行keyFile: /home/mongo/services/keyfile[mongo@mongo1 ~]$ ./mongod -f services/shard2/mongod.conf[mongo@mongo1 ~]$ vi services/shard3/mongod.conf#mongod.conf 添加以下配置
security:authorization: enabled  #若启动实例报错，可删除该行keyFile: /home/mongo/services/keyfile[mongo@mongo1 ~]$ ./mongod -f services/shard3/mongod.conf[mongo@mongo2 ~]$ vi services/mongos/mongos.conf#mongod.conf 添加以下配置
security:authorization: enabled  #若启动实例报错，可删除该行keyFile: /home/mongo/services/keyfile[mongo@mongo2 ~]$ ./mongos -f services/mongos/mongos.conf

[mongo@mongo3 ~]$ ./mongo 172.16.0.192:27017/admin -u admin -p 123456

use testShard
db.createUser({user:"test",pwd:"test",roles:[{role:"readWrite", db:"testShard"} #读写权限]}
)
db.auth("test","test")

[mongo@mongo3 ~]$ ./mongo 172.16.0.192:27017/testShard -u test -p test
MongoDB shell version v4.0.3
connecting to: mongodb://172.16.0.192:27017/testShard
Implicit session: session { "id" : UUID("e0f8bf3f-83d7-432c-ba4c-c063d865380e") }
MongoDB server version: 4.0.3