Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

use plugins emqx_auth_redis, After running for a few hours, failed for not_authorized #200

Open
imkos opened this issue Jun 9, 2021 · 0 comments

Comments

@imkos
Copy link

imkos commented Jun 9, 2021

  • EMQ X version (e.g. emqx_ctl status):
  • 4.3.3/4.2.12
  • OS (e.g. cat /etc/os-release):
  • k8s Cluster 1.20

#redis
EMQX_AUTH__REDIS__SERVER: ***
EMQX_AUTH__REDIS__PASSWORD: ***
EMQX_AUTH__REDIS__DATABASE: "1"
EMQX_AUTH__REDIS__PASSWORD_HASH: sha256,salt
EMQX_AUTH__REDIS__AUTH_CMD: HMGET mqtt_user:%u password salt
EMQX_AUTH__REDIS__ACL_CMD: HGETALL mqtt_acl:%u:%c
EMQX_ALLOW_ANONYMOUS: "false"
EMQX_ACL_NOMATCH: deny

[Redis] do_check_acl error: tcp_closed
[Redis] Command: "HMGET mqtt_user:%u password salt" failed: tcp_closed
[Channel] Client *** (Username: '****') login failed for not_authorized

[root@node1 ~]# ipvsadm -lnc|grep 6379
TCP 05:54 ESTABLISHED 10.244.1.131:33307 10.97.106.32:6379 10.244.1.121:6379
TCP 05:54 ESTABLISHED 10.244.1.131:34995 10.97.106.32:6379 10.244.1.121:6379
TCP 13:27 ESTABLISHED 10.244.1.48:40412 10.97.106.32:6379 10.244.1.121:6379
TCP 05:54 ESTABLISHED 10.244.1.131:45147 10.97.106.32:6379 10.244.1.121:6379
TCP 11:16 ESTABLISHED 10.244.1.52:49206 10.97.106.32:6379 10.244.1.121:6379
TCP 11:16 ESTABLISHED 10.244.1.175:47604 10.97.106.32:6379 10.244.1.121:6379
TCP 02:53 ESTABLISHED 10.244.1.129:36549 10.97.106.32:6379 10.244.1.121:6379
TCP 14:27 ESTABLISHED 10.244.1.96:40456 10.97.106.32:6379 10.244.1.121:6379
TCP 02:53 ESTABLISHED 10.244.1.131:43947 10.97.106.32:6379 10.244.1.121:6379

[root@node1 ~]# kubectl get pods -o wide|grep emqx
emqx-0 1/1 Running 0 24h 10.244.1.129 node1
emqx-1 1/1 Running 0 24h 10.244.1.130 node1
emqx-2 1/1 Running 0 24h 10.244.1.131 node1

emqx-0, emqx-1 no redis connection.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant