Mqtt accepting any password

HiveMQ Community Edition
1

Dear Team,

while connecting to mqtt with username and password which is set in credentials.xml file.
Here in the below case, instead of taking the below password test123, it is accepting any password.

could you please help in this case.

Host: mqtt.com
option: wss://
Port: 8000
Path: /mqtt
username: tib
password: test123

Thanks & Regards,
Mohammed.Raheem

2

Hello @raheem12

Thank you for contacting us. Could you please confirm if the File RBAC extension is enabled on the broker? Could you please share your hivemq.log, File RBAC extension’s extension-config.xml and credentials.xml files with us?

Regards,
Sheetal from the HiveMQ Team

3

Dear Sheetal,

I haven’t enabled File RBAC extension in this case. As enabling File RBAC extension, and adding the credentials in credential.xml give me error as below

WARN - Configuration for file auth extension has errors:
- User ‘tib’ has invalid password
2024-03-11 05:46:58,346 WARN - Configuration for file auth extension has errors:
- User ‘tib’ has invalid password

Below is the credential.xml file

cat credentials.xml

<?xml version="1.0" encoding="UTF-8" standalone="yes"?> tib test125 role1 admin-user Vddddddddddddddddddddddddddddddddddddddd superuser role1 data/${{clientid}}/# outgoing/${{clientid}} PUBLISH RETAINED incoming/${{username}}/actions SUBSCRIBE superuser #
4

Dear Team,

Could you please update.

Thanks & Regards,
Mohammed.Raheem

5

Dear Team,

I am waiting for update , on how mqtt should accept only specific password but rather it is accepting any password.

Could you please help

6

Dear Team,

I have already setup hivemq-ce, i am in last step, i need you assitance on password to be used only specificied in credentials.xml

7

Hello @raheem12

As you mentioned you are getting

error WARN - Configuration for file auth extension has errors:
User ‘tib’ has invalid password
2024-03-11 05:46:58,346 WARN - Configuration for file auth extension has errors:- User ‘tib’ has invalid password

Ideally User configuration should look like this, which is not in your case.

<user>
    <name>user1</name>
    <password>pass1</password>
    <roles>
        <id>role1</id>
    </roles>
</user>

Please check our example of the credentials.xml and create a hashed or plain password for your user. Please make sure you enable the RBAC extension and disable hivemq-allow-all-extension extension.

We hope this helps.

Regards,
Sheetal from HiveMQ Team

8

Dear Sheetal,

Thank you for sharing the valuable information.

can we have multiple users on mqtt , could you please let us know

Thanks & Regards,
Mohammed.Raheem

9

Hi @raheem12

Certainly, you can have multiple users. Here’s an example demonstrating multiple users and roles defined: https://github.com/hivemq/hivemq-file-rbac-extension#user-content-credentials-config.

I hope this information proves helpful.

Best regards,
Dasha from HiveMQ Team