MongoDB Documentation, Release 3.0.4 Authenticate With Kerberos Operational Considerations The HTTP Console DNS System Time Synchronization Kerberized MongoDB Environments Driver Support Use with Additional MongoDB Authentication Mechanism To configure MongoDB for Kerberos support and authenticate, see Configure MongoDB with Kerberos Authentication on Linux (page 372) and Configure MongoDB with Kerberos Authentication on Windows (page 376). The MongoDB HTTP Console 20 interface does not support Kerberos authentication. Each host that runs a mongod or mongos instance must have both A and PTR DNS records to provide forward and reverse lookup. Without A and PTR DNS records, the host cannot resolve the components of the Kerberos domain or the Key Distri- bution Center (KDC). To successfully authenticate, the system time for each mongod and mongos instance must be within 5 minutes of the system time of the other hosts in the Kerberos infrastructure. The following MongoDB drivers support Kerberos authentication: • Java 21 • C# 22 • C++ 23 • Python 24 Although MongoDB supports the use of Kerberos authentication with other authentication mechanisms, only add the other mechanisms as necessary. See the Incorporate Additional Authentication Mechanisms section in Configure MongoDB with Kerberos Authentication on Linux (page 372) and Configure MongoDB with Kerberos Authentication on Windows (page 376) for details. $^{20}$https://docs.mongodb.org/ecosystem/tools/http-interfaces/#http-console $^{21}$https://docs.mongodb.org/ecosystem/tutorial/authenticate-with-java-driver/ $^{22}$https://docs.mongodb.org/ecosystem/tutorial/authenticate-with-csharp-driver/ $^{23}$https://docs.mongodb.org/ecosystem/tutorial/authenticate-with-cpp-driver/ $^{24}$http://api.mongodb.org/python/current/examples/authentication.html 333 6.2. Security Concepts