emqx-auth-redis icon indicating copy to clipboard operation
emqx-auth-redis copied to clipboard

use plugins emqx_auth_redis, After running for a few hours, failed for not_authorized

Open imkos opened this issue 3 years ago • 0 comments

  • EMQ X version (e.g. emqx_ctl status):
  • 4.3.3/4.2.12
  • OS (e.g. cat /etc/os-release):
  • k8s Cluster 1.20

#redis EMQX_AUTH__REDIS__SERVER: *** EMQX_AUTH__REDIS__PASSWORD: *** EMQX_AUTH__REDIS__DATABASE: "1" EMQX_AUTH__REDIS__PASSWORD_HASH: sha256,salt EMQX_AUTH__REDIS__AUTH_CMD: HMGET mqtt_user:%u password salt EMQX_AUTH__REDIS__ACL_CMD: HGETALL mqtt_acl:%u:%c EMQX_ALLOW_ANONYMOUS: "false" EMQX_ACL_NOMATCH: deny

[Redis] do_check_acl error: tcp_closed [Redis] Command: "HMGET mqtt_user:%u password salt" failed: tcp_closed [Channel] Client *** (Username: '****') login failed for not_authorized

[root@node1 ~]# ipvsadm -lnc|grep 6379 TCP 05:54 ESTABLISHED 10.244.1.131:33307 10.97.106.32:6379 10.244.1.121:6379 TCP 05:54 ESTABLISHED 10.244.1.131:34995 10.97.106.32:6379 10.244.1.121:6379 TCP 13:27 ESTABLISHED 10.244.1.48:40412 10.97.106.32:6379 10.244.1.121:6379 TCP 05:54 ESTABLISHED 10.244.1.131:45147 10.97.106.32:6379 10.244.1.121:6379 TCP 11:16 ESTABLISHED 10.244.1.52:49206 10.97.106.32:6379 10.244.1.121:6379 TCP 11:16 ESTABLISHED 10.244.1.175:47604 10.97.106.32:6379 10.244.1.121:6379 TCP 02:53 ESTABLISHED 10.244.1.129:36549 10.97.106.32:6379 10.244.1.121:6379 TCP 14:27 ESTABLISHED 10.244.1.96:40456 10.97.106.32:6379 10.244.1.121:6379 TCP 02:53 ESTABLISHED 10.244.1.131:43947 10.97.106.32:6379 10.244.1.121:6379

[root@node1 ~]# kubectl get pods -o wide|grep emqx emqx-0 1/1 Running 0 24h 10.244.1.129 node1 emqx-1 1/1 Running 0 24h 10.244.1.130 node1 emqx-2 1/1 Running 0 24h 10.244.1.131 node1

emqx-0, emqx-1 no redis connection.

imkos avatar Jun 09 '21 03:06 imkos