# I have 2 issues

**URL:** <https://community.hivemq.com/t/i-have-2-issues/1431>\
**Category:** HiveMQ Commercial Offerings\
**Created:** [September 12, 2022, 3:30pm UTC](https://community.hivemq.com/t/i-have-2-issues/1431 "2022-09-12T15:30:07Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ramon](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@Ramon](https://community.hivemq.com/u/Ramon)\
**Post date:** [September 12, 2022, 3:30pm UTC](https://community.hivemq.com/t/i-have-2-issues/1431/1 "2022-09-12T15:30:08Z")

</div>

Hi,  
I’ve installed the ARM template in a Azure VM, installed the Postgresql and activated the ESE in my broker.  
I currently have 2 issues.  
The first one with the Control Center. I’m not able to log in with the default user/passwrd.

This is what I get in the log files:  
2022-09-12 16:05:21,149 ERROR - An error occurred while querying user StringVariable{name=‘authentication-key’, value=‘admin’} in realm postgres-backend.  
java.sql.SQLException: ERROR: relation “cc\_users” does not exist  
Position: 103 Query: SELECT u.id, u.username, u.password, u.password\_salt, u.password\_iterations, u.algorithm, r.name FROM cc\_users AS u LEFT JOIN (SELECT cc\_user\_roles.user\_id, cc\_roles.name FROM cc\_user\_roles INNER JOIN cc\_roles ON cc\_user\_roles.role\_id = cc\_roles.id) AS r ON u.id = r.user\_id WHERE username = ? Parameters: [admin]  
at org.apache.commons.dbutils.AbstractQueryRunner.rethrow(Unknown Source)  
at org.apache.commons.dbutils.QueryRunner.query(Unknown Source)  
at org.apache.commons.dbutils.QueryRunner.query(Unknown Source)  
at aa.b.a(Unknown Source)  
at aa.b.a(Unknown Source)  
at java.base/java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1700)  
at dV.f.run(Unknown Source)  
at com.codahale.metrics.InstrumentedScheduledExecutorService$InstrumentedRunnable.run(Unknown Source)  
at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)  
at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)  
at java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:304)  
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)  
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)  
at java.base/java.lang.Thread.run(Thread.java:829)

The second issue is with the mqtt cli, when I tried to conect, pub or sub, it says “CONNECT failed as CONNACK contained an Error Code: NOT\_AUTHORIZED.”

Could you please help me with these 2 issues?  
Thank you in advance

---

<div class="post-metadata">

**Author:** ![Daria\_H](https://avatars.discourse-cdn.com/v4/letter/d/dfb087/32.png) [@Daria\_H](https://community.hivemq.com/u/Daria_H)\
**Post date:** [September 12, 2022, 4:11pm UTC](https://community.hivemq.com/t/i-have-2-issues/1431/2 "2022-09-12T16:11:13Z")

</div>

Hi @Ramon  
Great to see you interested in MQTT and HiveMQ, welcome to our community !

The Control Center default login works when you do not have custom authentication for the Control Center users. Otherwise you need to use that username and password that you have added to the ESE DB cc\_users table. If you like I could review your `enterprise-security-extension-configuration.xml` and `config.xml` (I hope there is no private info , but if there is please clean it first)

To troubleshoot the “Not authorized” response, first you need to set root log level to DEBUG in the logback.xml ($HIVEMQ\_HOME/conf/logback.xml). Then you will see DEBUG messages from the ESE in the hivemq.log and the log will contain more details regarding “Not authorized” and which AUTHORIZATION\_ROLE\_KEY is used. Feel free to share the log message here.

To see successful authorisations tail the access.log ($HIVEMQ\_HOME/log/access/access.log)

Kind regards,  
Dasha from HiveMQ team

---

<div class="post-metadata">

**Author:** ![Ramon](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@Ramon](https://community.hivemq.com/u/Ramon)\
**Post date:** [September 12, 2022, 6:19pm UTC](https://community.hivemq.com/t/i-have-2-issues/1431/3 "2022-09-12T18:19:54Z")

</div>

Thank you Dasha!  
Please see below the config.xml:  
/opt/hivemq/conf$ more config.xml

\<?xml version="1.0"?\>

```
<listeners>
    <tcp-listener>
        <port>1883</port>
        <bind-address>0.0.0.0</bind-address>
    </tcp-listener>
</listeners>

<cluster>
    <enabled>true</enabled>

    <transport>
        <tcp>
            <bind-address>0.0.0.0</bind-address>
            <bind-port>7800</bind-port>
        </tcp>
    </transport>

    <discovery>
        <extension/>
    </discovery>

</cluster>

 <control-center>
    <enabled>true</enabled>
    <listeners>
        <http>
            <port>8080</port>
            <bind-address>0.0.0.0</bind-address>
        </http>
    </listeners>
</control-center>

```

Also, please find below the enterprise-security-extension-configuration.xml:

cat /opt/hivemq/extensions/hivemq-enterprise-security-extension/conf/enterprise-security-extension.xml

\<?xml version="1.0" encoding="UTF-8" ?\>

postgres-backend  
true  
  
POSTGRES  
hivemq-ese-db  
localhost  
5432  
postgres  
postgres  
  
  
  
  
  
  
  
  
postgres-backend  
  
  
  
postgres-backend  
false  
true  
  
  
  
  
  
  
postgres-backend  
  
  
  
postgres-backend  
true  
true

So, when I run: opt/hivemq/conf$ mqtt pub -u admin -t test -m ‘testtt’  
I get: PUBLISH: CONNECT failed as CONNACK contained an Error Code: NOT\_AUTHORIZED.  
I don’t get any log in hivemq.log but in the access.log I get:  
2022-09-12 18:15:05,964 UTC - authentication-failed - Client failed authentication: ID mqttClient-MQTT\_5\_0-ee9d1ab5-b879-436a-85d7-e5eb6d612921, IP 127.0.0.1, reason “unknown authentication key or wrong authentication secret”.

Thanks a lot!!

---

<div class="post-metadata">

**Author:** ![Ramon](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@Ramon](https://community.hivemq.com/u/Ramon)\
**Post date:** [September 12, 2022, 6:30pm UTC](https://community.hivemq.com/t/i-have-2-issues/1431/5 "2022-09-12T18:30:25Z")

</div>

Please find below the enterprise-security-extension-configuration.xml:

\<?xml version="1.0" encoding="UTF-8" ?\>

\<enterprise-security-extension  
xmlns:xsi=“[http://www.w3.org/2001/XMLSchema-instance](http://www.w3.org/2001/XMLSchema-instance)”  
xsi:noNamespaceSchemaLocation=“enterprise-security-extension.xsd”  
version=“1”

```
<realms>
    <!-- a postgresql db-->
    <sql-realm>
        <name>postgres-backend</name>
        <enabled>true</enabled>
        <configuration>
            <db-type>POSTGRES</db-type>
            <db-name>hivemq-ese-db</db-name>
            <db-host>localhost</db-host>
            <db-port>5432</db-port>
            <db-username>postgres</db-username>
            <db-password>postgres</db-password>
        </configuration>
    </sql-realm>
</realms>
<pipelines>
    <!-- secure access to the mqtt broker -->
    <listener-pipeline listener="ALL">
        <!-- authenticate over a sql db -->
        <sql-authentication-manager>
            <realm>postgres-backend</realm>
        </sql-authentication-manager>
        <!-- authorize over a sql db -->
        <sql-authorization-manager>
            <realm>postgres-backend</realm>
            <use-authorization-key>false</use-authorization-key>
            <use-authorization-role-key>true</use-authorization-role-key>
        </sql-authorization-manager>
    </listener-pipeline>
    <!-- secure access to the control center -->
    <control-center-pipeline>
        <!-- authenticate over a sql db -->
        <sql-authentication-manager>
            <realm>postgres-backend</realm>
        </sql-authentication-manager>
        <!-- authorize over a sql db -->
        <sql-authorization-manager>
            <realm>postgres-backend</realm>
            <use-authorization-key>true</use-authorization-key>
            <use-authorization-role-key>true</use-authorization-role-key>
        </sql-authorization-manager>
    </control-center-pipeline>
</pipelines>

```

---

<div class="post-metadata">

**Author:** ![Ramon](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@Ramon](https://community.hivemq.com/u/Ramon)\
**Post date:** [September 13, 2022, 1:38am UTC](https://community.hivemq.com/t/i-have-2-issues/1431/6 "2022-09-13T01:38:15Z")

</div>

Hi,  
when I tail "tail -f /opt/hivemq/log/access/access.log ", I get:  
2022-09-13 01:33:45,392 UTC - authentication-failed - Client failed authentication: ID mqttClient-MQTT\_5\_0-1b7767c9-566f-4dfb-b032-4289557baf14, IP 127.0.0.1, reason “unknown authentication key or wrong authentication secret”.

I think it hasto be something with the config file from postgresql pg\_hba.conf. Please have a look at my file below.

# Database administrative login by Unix domain socket

local all postgres peer

# TYPE DATABASE USER ADDRESS METHOD

# “local” is for Unix domain socket connections only

local all all peer

# IPv4 local connections:

host all all 83.40.226.159/32 md5  
host all all 127.0.0.1/32 md5

# IPv6 local connections:

host all all ::1/128 md5

# Allow replication connections from localhost, by a user with the

# replication privilege.

local replication all peer  
host replication all 127.0.0.1/32 md5  
host replication all ::1/128 md5

---

<div class="post-metadata">

**Author:** ![Ramon](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@Ramon](https://community.hivemq.com/u/Ramon)\
**Post date:** [September 13, 2022, 7:51am UTC](https://community.hivemq.com/t/i-have-2-issues/1431/7 "2022-09-13T07:51:03Z")

</div>

Hi Dasha,  
I’ve been able to fix the issue with the Control Center user. Now I’m able to login to the Control Center.  
The other issue still remains the same…and it is really annoying… for any try to connect, i always get the same error:

#MQTT pub -t test -m ‘sf’  
PUBLISH: CONNECT failed as CONNACK contained an Error Code: NOT\_AUTHORIZED.

# 

In access.log:  
2022-09-13 07:49:53,230 UTC - authentication-failed - Client failed authentication: ID mqttClient-MQTT\_5\_0-6d19c605-5fbd-4ead-a7aa-7b4d7c2a1579, IP 127.0.0.1, reason “unknown authentication key or wrong authentication secret”.

I guess it should be something related to the client. When I go the shell and try to connect from a client:

mqtt\> con -i myclient  
CONNECT failed as CONNACK contained an Error Code: NOT\_AUTHORIZED.  
mqtt\>

---

<div class="post-metadata">

**Author:** ![Daria\_H](https://avatars.discourse-cdn.com/v4/letter/d/dfb087/32.png) [@Daria\_H](https://community.hivemq.com/u/Daria_H)\
**Post date:** [September 15, 2022, 11:04am UTC](https://community.hivemq.com/t/i-have-2-issues/1431/8 "2022-09-15T11:04:17Z")

</div>

Hi Ramon,

In this command:

> [@Ramon](#):
>
> mqtt\> con -i myclient  
> CONNECT failed as CONNACK contained an Error Code: NOT\_AUTHORIZED.

you are not providing any authentication key. Try specifying username and password for your connect:

```auto
mqtt> connect --identifier mylcient --username <your username> --password <your password>

```

To check your work, set the log level to DEBUG and monitor the `hivemq.log` for “authentication” warnings. To set the log level to [DEBUG](https://www.hivemq.com/docs/hivemq/4.8/user-guide/logging.html#change), in the `logback.xml` update this:

```auto
    <root level="${HIVEMQ_LOG_LEVEL:-DEBUG}">
        <appender-ref ref="FILE"/>
        <appender-ref ref="CONSOLE"/>
    </root>

```

I hope this helps,  
Dasha

---

<div class="post-metadata">

**Author:** ![Ramon](https://avatars.discourse-cdn.com/v4/letter/r/34f0e0/32.png) [@Ramon](https://community.hivemq.com/u/Ramon)\
**Post date:** [September 16, 2022, 5:55am UTC](https://community.hivemq.com/t/i-have-2-issues/1431/9 "2022-09-16T05:55:28Z")

</div>

Hi Dasha,  
thank you for your help!  
I was able to fix it with your help. It works now!  
Thanks!  
Ramon