← Back to team overview

mosquitto-users team mailing list archive

ACL per listener?

 

I've got a situation where I have one SSL listener using certificate based
authentication and a pattern ACL for sending status updates via MQTT. Now
I'm trying to set up an unauthenticated listener for use on the internal
network. That listener should provide read only access to the same data.
e.g pattern write device/%u/status/# in one case and topic read
device/+/status/#

I'm not sure if/how to set that up.

My first thought is to wonder if ACLs and other security
settings(allow_anonymous, auth_plugin, etc) should be per listener? Looking
at the code it doesn't look like it would be that difficult, but does
anyone else think that's a good idea?

Thanks,
 Darren

Follow ups