Mosquitto post-install info

[havardthom]

Original thread: tteck/Proxmox#2921

Mosquitto comes with a password file generating utility called mosquitto_passwd.

mosquitto_passwd -c /etc/mosquitto/passwd <user>

Ensure that the file is managed by the appropriate user and group.

chown mosquitto:mosquitto /etc/mosquitto/passwd

Now restart Mosquitto server.

systemctl restart mosquitto

The command below will show what ports are listening (look for *:1883 (LISTEN))

lsof -i -P -n | grep LISTEN

[aktentasche]

Alternatively disable authentication by running nano /etc/mosquitto/conf.d/default.conf and changing:

allow_anonymous false
persistence true
password_file /etc/mosquitto/passwd
listener 1883

to

allow_anonymous true
persistence true
# password_file /etc/mosquitto/passwd
listener 1883

[agautam]

Original thread: tteck/Proxmox#2921

Mosquitto comes with a password file generating utility called mosquitto_passwd.

mosquitto_passwd -c /etc/mosquitto/passwd <user>

Ensure that the file is managed by the appropriate user and group.

chown mosquitto:mosquitto /etc/mosquitto/passwd

Small recommendation here - make the file owned by user=root and group=mosquitto.

chown root:mosquitto /etc/mosquitto/passwd

Then update the permissions so it may be read by the group

chmod 0640 /etc/mosquitto/passwd

An additional note here:
mosquitto_passwd utility WILL give a warning if the file isn't owned by root:root and/or its permissions are anything wider than 0700. Unfortunately with that permission set and ownership - the file isn't readable by mosquitto service itself. So... pick your poison.