MongoDB server can still be accessed without credentials

Question

I have a fresh mongodb server (2.6.0) in my machine and I started the mongod instance with the following config file:

dbpath = c:\\mongo\\data\\db
port = 270         


        

Answer 1

Although you can protect your databases by enabling authentication in security section of the mongo.conf file like this:

security:
  authorization: enabled