bugCats commented on issue #6768:
URL: https://github.com/apache/rocketmq/issues/6768#issuecomment-1550921225
> The default acl dir
我在`conf`目录下创建了`acl`文件夹，并且复制了一份`plain_acl.yml`文件放入`conf/acl`目录中，然后重启了`broker`，依然不生效。
.
.
├── acl
│ └── plain_acl.yml
├── broker.conf
├── plain_acl.yml
├── rmq-proxy.json
.
.
启动日志：
*023-05-17 15:17:53 INFO main - Looking for a resource file of name
[META-INF/service/org.apache.rocketmq.acl.AccessValidator] ...
2023-05-17 15:17:53 WARN main - No resource file with name
[META-INF/service/org.apache.rocketmq.acl.AccessValidator] found.
2023-05-17 15:17:53 INFO main - ServiceProvider loaded no AccessValidator,
using default org.apache.rocketmq.acl.plain.PlainAccessValidator
2023-05-17 15:17:53 INFO main - Broker plain acl conf data is :
{"dataVersion":[{"counter":5,"timestamp":1684290520350}],"accounts":[{"accessKey":"RocketMQ","secretKey":12345678,"admin":false,"defaultTopicPerm":"DENY","defaultGroupPerm":"SUB","topicPerms":["topicA=DENY","topicB=PUB|SUB","topicC=SUB"],"groupPerms":["groupA=DENY","groupB=PUB|SUB","groupC=SUB"]},{"accessKey":"bugCatsadmin","secretKey":"12345678","admin":true},{"accessKey":"rocketmq2","secretKey":"12345678","admin":true}]}
2023-05-17 15:17:53 INFO main - Broker plain acl conf data is :
{"dataVersion":[{"counter":5,"timestamp":1684290520350}],"accounts":[{"accessKey":"RocketMQ","secretKey":12345678,"admin":false,"defaultTopicPerm":"DENY","defaultGroupPerm":"SUB","topicPerms":["topicA=DENY","topicB=PUB|SUB","topicC=SUB"],"groupPerms":["groupA=DENY","groupB=PUB|SUB","groupC=SUB"]},{"accessKey":"bugCatsadmin","secretKey":"12345678","admin":true},{"accessKey":"rocketmq2","secretKey":"12345678","admin":true}]}
2023-05-17 15:17:53 WARN main - The accessKey RocketMQ is repeated in
multiple ACL files
2023-05-17 15:17:53 WARN main - The accessKey bugCatsadmin is repeated in
multiple ACL files
2023-05-17 15:17:53 WARN main - The accessKey rocketmq2 is repeated in
multiple ACL files
2023-05-17 15:17:53 INFO main - Try to start service
thread:AclFileWatchService started:false lastThread:null
2023-05-17 15:17:53 INFO main - Succeed to start AclFileWatchService
2023-05-17 15:17:53 INFO AclFileWatchService - AclFileWatchService service
started*
我修改过`broker.conf`、`rmq-proxy.json`、以及自定义配置文件，都没有生效。
自定义配置：
{
"grpcServerPort": 15891, /* proxy 端口，15891~15899 */
"enableACL": true,
"enableTopicMessageTypeCheck": true /* 开启主题和消息类型验证 */
}
同样在`org.apache.rocketmq.proxy.config.ProxyConfig`中的`grpcServerPort`生效了（我的proxy访问端口变成了15891），但是客户端仍然无需账号可以访问。
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
