1
0
mirror of https://github.com/eclipse/mosquitto.git synced 2025-05-09 01:01:11 +08:00

Add references to dynsec plugin in mosquitto.conf(5)

Closes #2089. Thanks to YerayAlonso.
This commit is contained in:
Roger A. Light 2021-04-03 11:41:25 +01:00
parent 983dc14f2c
commit 54df92cdc9

View File

@ -42,7 +42,8 @@
<title>Authentication</title> <title>Authentication</title>
<para>The authentication options described below allow a wide range of <para>The authentication options described below allow a wide range of
possibilities in conjunction with the listener options. This possibilities in conjunction with the listener options. This
section aims to clarify the possibilities.</para> section aims to clarify the possibilities. An overview is also available at
<ulink url="https://mosquitto.org/documentation/authentication-methods/"/></para>
<para>The simplest option is to have no authentication at all. This is <para>The simplest option is to have no authentication at all. This is
the default if no other options are given. Unauthenticated the default if no other options are given. Unauthenticated
encrypted support is provided by using the certificate based encrypted support is provided by using the certificate based
@ -54,6 +55,11 @@
vulnerable to interception. Use the vulnerable to interception. Use the
<option>per_listener_settings</option> to control whether passwords <option>per_listener_settings</option> to control whether passwords
are required globally or on a per-listener basis.</para> are required globally or on a per-listener basis.</para>
<para>Mosquitto provides the Dynamic Security plugin which handles
username/password authentication and access control in a much
more flexible way than a password file. See
<ulink url="https://mosquitto.org/documentation/dynamic-security/"/>
</para>
<para>When using certificate based encryption there are three options <para>When using certificate based encryption there are three options
that affect authentication. The first is require_certificate, which that affect authentication. The first is require_certificate, which
may be set to true or false. If false, the SSL/TLS component of the may be set to true or false. If false, the SSL/TLS component of the
@ -164,6 +170,9 @@
<para>Reloaded on reload signal. The currently loaded ACLs <para>Reloaded on reload signal. The currently loaded ACLs
will be freed and reloaded. Existing subscriptions will will be freed and reloaded. Existing subscriptions will
be affected after the reload.</para> be affected after the reload.</para>
<para>See also
<ulink url="https://mosquitto.org/documentation/dynamic-security/"/>
</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
<varlistentry> <varlistentry>
@ -267,6 +276,9 @@
alongsize <option>auth_plugin</option>, the plugin alongsize <option>auth_plugin</option>, the plugin
checks will run after the built in checks.</para> checks will run after the built in checks.</para>
<para>Not currently reloaded on reload signal.</para> <para>Not currently reloaded on reload signal.</para>
<para>See also
<ulink url="https://mosquitto.org/documentation/dynamic-security/"/>
</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
<varlistentry> <varlistentry>
@ -753,7 +765,9 @@ log_timestamp_format %Y-%m-%dT%H:%M:%S
Clients that are already connected will not be Clients that are already connected will not be
affected.</para> affected.</para>
<para>See also <para>See also
<citerefentry><refentrytitle>mosquitto_passwd</refentrytitle><manvolnum>1</manvolnum></citerefentry>.</para> <citerefentry><refentrytitle>mosquitto_passwd</refentrytitle><manvolnum>1</manvolnum></citerefentry> and
<ulink url="https://mosquitto.org/documentation/dynamic-security/"/>
</para>
</listitem> </listitem>
</varlistentry> </varlistentry>
<varlistentry> <varlistentry>