gen_conf to improve the configuration of emqttd broker
This commit is contained in:
Feng
parent
ca44fd4031
commit
03d6710b60
|
|
@ -0,0 +1,28 @@
|
|||
%%--------------------------------------------------------------------
|
||||
%%
|
||||
%% [ACL](https://github.com/emqtt/emqttd/wiki/ACL)
|
||||
%%
|
||||
%% -type who() :: all | binary() |
|
||||
%% {ipaddr, esockd_access:cidr()} |
|
||||
%% {client, binary()} |
|
||||
%% {user, binary()}.
|
||||
%%
|
||||
%% -type access() :: subscribe | publish | pubsub.
|
||||
%%
|
||||
%% -type topic() :: binary().
|
||||
%%
|
||||
%% -type rule() :: {allow, all} |
|
||||
%% {allow, who(), access(), list(topic())} |
|
||||
%% {deny, all} |
|
||||
%% {deny, who(), access(), list(topic())}.
|
||||
%%
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
{allow, {user, "dashboard"}, subscribe, ["$SYS/#"]}.
|
||||
|
||||
{allow, {ipaddr, "127.0.0.1"}, pubsub, ["$SYS/#", "#"]}.
|
||||
|
||||
{deny, all, subscribe, ["$SYS/#", {eq, "#"}]}.
|
||||
|
||||
{allow, all}.
|
||||
|
||||
|
|
@ -0,0 +1,3 @@
|
|||
testclientid0
|
||||
testclientid1 127.0.0.1
|
||||
testclientid2 192.168.0.1/24
|
||||
|
|
@ -0,0 +1,250 @@
|
|||
|
||||
%%--------------------------------------------------------------------
|
||||
%% Authentication
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% Anonymous: Allow all
|
||||
{auth, anonymous, []}.
|
||||
|
||||
%% Authentication with username, password
|
||||
%% Passwd Hash: plain | md5 | sha | sha256
|
||||
{auth, username, [{passwd, "etc/passwd.conf"}, {passwd_hash, plain}]}.
|
||||
|
||||
%% Authentication with clientId
|
||||
{auth, clientid, [{clients, "etc/client.config"}, {password, no}]}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% ACL
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
{acl, anonymous, []}.
|
||||
|
||||
{acl, internal, [{config, "etc/acl.conf"}, {nomatch, allow}]}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% Broker
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% System interval of publishing broker $SYS messages
|
||||
{broker_sys_interval, 60}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% Retained message
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% Expired after seconds, never expired if 0
|
||||
{retained_expired_after, 0}.
|
||||
|
||||
%% Max number of retained messages
|
||||
{retained_max_message_num, 100000}.
|
||||
|
||||
%% Max Payload Size of retained message
|
||||
{retained_max_playload_size, 65536}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% MQTT Protocol
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% Max ClientId Length Allowed.
|
||||
{mqtt_max_clientid_len, 512}.
|
||||
|
||||
%% Max Packet Size Allowed, 64K by default.
|
||||
{mqtt_max_packet_size, 65536}.
|
||||
|
||||
%% Socket Idle Timeout.
|
||||
{mqtt_client_idle_timeout, 30}. % Seconds
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% MQTT Session
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% Max number of QoS 1 and 2 messages that can be “inflight” at one time.
|
||||
%% 0 means no limit
|
||||
{session_max_inflight, 100}.
|
||||
|
||||
%% Retry interval for redelivering QoS1/2 messages.
|
||||
{session_unack_retry_interval, 60}.
|
||||
|
||||
%% Awaiting PUBREL Timeout
|
||||
{session_await_rel_timeout, 20}.
|
||||
|
||||
%% Max Packets that Awaiting PUBREL, 0 means no limit
|
||||
{session_max_awaiting_rel, 0}.
|
||||
|
||||
%% Statistics Collection Interval(seconds)
|
||||
{session_collect_interval, 0}.
|
||||
|
||||
%% Expired after 2 day (unit: minute)
|
||||
{session_expired_after, 2880}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% Queue
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% Type: simple | priority
|
||||
{queue_type, simple}.
|
||||
|
||||
%% Topic Priority: 0~255, Default is 0
|
||||
%% {queue_priority, [{"topic/1", 10}, {"topic/2", 8}]}.
|
||||
|
||||
%% Max queue length. Enqueued messages when persistent client disconnected,
|
||||
%% or inflight window is full.
|
||||
{queue_max_length, infinity}.
|
||||
|
||||
%% Low-water mark of queued messages
|
||||
{queue_low_watermark, 0.2}.
|
||||
|
||||
%% High-water mark of queued messages
|
||||
{queue_high_watermark, 0.6}.
|
||||
|
||||
%% Queue Qos0 messages?
|
||||
{queue_qos0, true}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% Listeners
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% Plain MQTT
|
||||
{listener, mqtt, 1883, [
|
||||
%% Size of acceptor pool
|
||||
{acceptors, 16},
|
||||
|
||||
%% Maximum number of concurrent clients
|
||||
{max_clients, 512},
|
||||
|
||||
%% Socket Access Control
|
||||
{access, [{allow, all}]},
|
||||
|
||||
%% Connection Options
|
||||
{connopts, [
|
||||
%% Rate Limit. Format is 'burst, rate', Unit is KB/Sec
|
||||
%% {rate_limit, "100,10"} %% 100K burst, 10K rate
|
||||
]},
|
||||
|
||||
%% Socket Options
|
||||
{sockopts, [
|
||||
%Set buffer if hight thoughtput
|
||||
%{recbuf, 4096},
|
||||
%{sndbuf, 4096},
|
||||
%{buffer, 4096},
|
||||
%{nodelay, true},
|
||||
{backlog, 1024}
|
||||
]}
|
||||
]}.
|
||||
|
||||
%% MQTT SSL
|
||||
{listener, mqtts, 8883, [
|
||||
%% Size of acceptor pool
|
||||
{acceptors, 4},
|
||||
|
||||
%% Maximum number of concurrent clients
|
||||
{max_clients, 512},
|
||||
|
||||
%% Socket Access Control
|
||||
{access, [{allow, all}]},
|
||||
|
||||
%% SSL certificate and key files
|
||||
{ssl, [{certfile, "etc/ssl/ssl.crt"},
|
||||
{keyfile, "etc/ssl/ssl.key"}]},
|
||||
|
||||
%% Socket Options
|
||||
{sockopts, [
|
||||
{backlog, 1024}
|
||||
%{buffer, 4096},
|
||||
]}
|
||||
]}.
|
||||
|
||||
%% HTTP and WebSocket Listener
|
||||
{listener, http, 8083, [
|
||||
%% Size of acceptor pool
|
||||
{acceptors, 4},
|
||||
|
||||
%% Maximum number of concurrent clients
|
||||
{max_clients, 64},
|
||||
|
||||
%% Socket Access Control
|
||||
{access, [{allow, all}]},
|
||||
|
||||
%% Socket Options
|
||||
{sockopts, [
|
||||
{backlog, 1024}
|
||||
%{buffer, 4096},
|
||||
]}
|
||||
]}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% PubSub
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% PubSub and Router. Default should be scheduler numbers.
|
||||
{pubsub_pool_size, 8}.
|
||||
|
||||
%% Route aging time(seconds)
|
||||
{pubsub_routing_age, 5}.
|
||||
|
||||
%%--------------------------------------------------------------------
|
||||
%% Bridge
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% TODO: Bridge Queue Size
|
||||
{bridge_max_queue_len, 10000}.
|
||||
|
||||
%% Ping Interval of bridge node
|
||||
{bridge_ping_down_interval, 1} %seconds
|
||||
|
||||
%%-------------------------------------------------------------------
|
||||
%% Plugins
|
||||
%%-------------------------------------------------------------------
|
||||
|
||||
%% Plugins Dir
|
||||
{plugins_dir, "./plugins"}.
|
||||
|
||||
%% File to store loaded plugin names.
|
||||
{plugins_loaded_file, "./data/loaded_plugins"}.
|
||||
|
||||
%%-------------------------------------------------------------------
|
||||
%% Modules
|
||||
%%-------------------------------------------------------------------
|
||||
|
||||
%% Client presence management module. Publish presence messages when client connected or disconnected
|
||||
{module, presence, [{qos, 0}]}.
|
||||
|
||||
%% Subscribe topics automatically when client connected
|
||||
{module, subscription, [{"$queue/clients/$c", 1}, backend]}.
|
||||
|
||||
%% [Rewrite](https://github.com/emqtt/emqttd/wiki/Rewrite)
|
||||
{module, rewrite, [
|
||||
|
||||
%{topic, "x/#", [
|
||||
% {rewrite, "^x/y/(.+)$", "z/y/$1"},
|
||||
% {rewrite, "^x/(.+)$", "y/$1"}
|
||||
%]},
|
||||
|
||||
%{topic, "y/+/z/#", [
|
||||
% {rewrite, "^y/(.+)/z/(.+)$", "y/z/$2"}
|
||||
%]}
|
||||
|
||||
]}.
|
||||
|
||||
%%-------------------------------------------------------------------
|
||||
%% Erlang System Monitor
|
||||
%%-------------------------------------------------------------------
|
||||
|
||||
%% Long GC, don't monitor in production mode for:
|
||||
%% https://github.com/erlang/otp/blob/feb45017da36be78d4c5784d758ede619fa7bfd3/erts/emulator/beam/erl_gc.c#L421
|
||||
|
||||
{sysmon_long_gc, false}.
|
||||
|
||||
%% Long Schedule(ms)
|
||||
{sysmon_long_schedule, 240}.
|
||||
|
||||
%% 8M words. 32MB on 32-bit VM, 64MB on 64-bit VM.
|
||||
%% 8 * 1024 * 1024
|
||||
{sysmon_large_heap, 8388608}.
|
||||
|
||||
%% Busy Port
|
||||
{sysmon_busy_port, false}.
|
||||
|
||||
%% Busy Dist Port
|
||||
{sysmon_busy_dist_port, true}.
|
||||
|
||||
|
|
@ -0,0 +1,2 @@
|
|||
user1:passwd1
|
||||
user2:passwd2
|
||||
323
rel/files/emqttd
323
rel/files/emqttd
|
|
@ -1,323 +0,0 @@
|
|||
#!/bin/sh
|
||||
# -*- tab-width:4;indent-tabs-mode:nil -*-
|
||||
# ex: ts=4 sw=4 et
|
||||
|
||||
# /bin/sh on Solaris is not a POSIX compatible shell, but /usr/bin/ksh is.
|
||||
if [ `uname -s` = 'SunOS' -a "${POSIX_SHELL}" != "true" ]; then
|
||||
POSIX_SHELL="true"
|
||||
export POSIX_SHELL
|
||||
# To support 'whoami' add /usr/ucb to path
|
||||
PATH=/usr/ucb:$PATH
|
||||
export PATH
|
||||
exec /usr/bin/ksh $0 "$@"
|
||||
fi
|
||||
unset POSIX_SHELL # clear it so if we invoke other scripts, they run as ksh as well
|
||||
|
||||
RUNNER_SCRIPT_DIR={{runner_script_dir}}
|
||||
RUNNER_SCRIPT=${0##*/}
|
||||
|
||||
RUNNER_BASE_DIR={{runner_base_dir}}
|
||||
RUNNER_ETC_DIR={{runner_etc_dir}}
|
||||
RUNNER_LIB_DIR={{platform_lib_dir}}
|
||||
RUNNER_LOG_DIR={{runner_log_dir}}
|
||||
RUNNER_DATA_DIR=$RUNNER_BASE_DIR/data
|
||||
RUNNER_PLUGINS_DIR=$RUNNER_BASE_DIR/plugins
|
||||
|
||||
# Note the trailing slash on $PIPE_DIR/
|
||||
PIPE_DIR={{pipe_dir}}
|
||||
RUNNER_USER={{runner_user}}
|
||||
PLATFORM_DATA_DIR={{platform_data_dir}}
|
||||
SSL_DIST_CONFIG=$PLATFORM_DATA_DIR/ssl_distribution.args_file
|
||||
RIAK_VERSION="git"
|
||||
|
||||
WHOAMI=$(whoami)
|
||||
|
||||
# Make sure this script is running as the appropriate user
|
||||
if ([ "$RUNNER_USER" ] && [ "x$WHOAMI" != "x$RUNNER_USER" ]); then
|
||||
type sudo > /dev/null 2>&1
|
||||
if [ $? -ne 0 ]; then
|
||||
echo "sudo doesn't appear to be installed and your EUID isn't $RUNNER_USER" 1>&2
|
||||
exit 1
|
||||
fi
|
||||
echo "Attempting to restart script through sudo -H -u $RUNNER_USER" >&2
|
||||
exec sudo -H -u $RUNNER_USER -i $RUNNER_SCRIPT_DIR/$RUNNER_SCRIPT $@
|
||||
fi
|
||||
|
||||
# Warn the user if ulimit -n is less than 1024
|
||||
ULIMIT_F=`ulimit -n`
|
||||
if [ "$ULIMIT_F" -lt 1024 ]; then
|
||||
echo "!!!!"
|
||||
echo "!!!! WARNING: ulimit -n is ${ULIMIT_F}; 1024 is the recommended minimum."
|
||||
echo "!!!!"
|
||||
fi
|
||||
|
||||
# Make sure CWD is set to runner base dir
|
||||
cd $RUNNER_BASE_DIR
|
||||
|
||||
# Make sure log directory exists
|
||||
mkdir -p $RUNNER_LOG_DIR
|
||||
|
||||
# Make sure the data directory exists
|
||||
mkdir -p $PLATFORM_DATA_DIR
|
||||
|
||||
# Warn the user if they don't have write permissions on the log dir
|
||||
if [ ! -w $RUNNER_LOG_DIR ]; then
|
||||
echo "!!!!"
|
||||
echo "!!!! WARNING: $RUNNER_LOG_DIR not writable; logs and crash dumps unavailable."
|
||||
echo "!!!!"
|
||||
fi
|
||||
|
||||
# Extract the target node name from node.args
|
||||
NAME_ARG=`egrep '^\-s?name' $RUNNER_ETC_DIR/vm.args`
|
||||
if [ -z "$NAME_ARG" ]; then
|
||||
echo "vm.args needs to have either -name or -sname parameter."
|
||||
exit 1
|
||||
fi
|
||||
NODE_NAME=${NAME_ARG##* }
|
||||
|
||||
# Extract the target cookie
|
||||
COOKIE_ARG=`grep '^\-setcookie' $RUNNER_ETC_DIR/vm.args`
|
||||
if [ -z "$COOKIE_ARG" ]; then
|
||||
echo "vm.args needs to have a -setcookie parameter."
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Identify the script name
|
||||
SCRIPT=`basename $0`
|
||||
|
||||
# Parse out release and erts info
|
||||
START_ERL=`cat $RUNNER_BASE_DIR/releases/start_erl.data`
|
||||
ERTS_VSN=${START_ERL% *}
|
||||
APP_VSN=${START_ERL#* }
|
||||
|
||||
# Add ERTS bin dir to our path
|
||||
ERTS_PATH=$RUNNER_BASE_DIR/erts-$ERTS_VSN/bin
|
||||
|
||||
# Setup command to control the node
|
||||
NODETOOL="$ERTS_PATH/escript $ERTS_PATH/nodetool $NAME_ARG $COOKIE_ARG"
|
||||
NODETOOL_LITE="$ERTS_PATH/escript $ERTS_PATH/nodetool"
|
||||
|
||||
# Common functions
|
||||
|
||||
# Ping node without allowing nodetool to take stdin
|
||||
ping_node() {
|
||||
$NODETOOL ping < /dev/null
|
||||
}
|
||||
|
||||
# Set the PID global variable, return 1 on error
|
||||
get_pid() {
|
||||
PID=`$NODETOOL getpid < /dev/null`
|
||||
ES=$?
|
||||
if [ "$ES" -ne 0 ]; then
|
||||
echo "Node is not running!"
|
||||
return 1
|
||||
fi
|
||||
|
||||
# don't allow empty or init pid's
|
||||
if [ -z $PID ] || [ "$PID" -le 1 ]; then
|
||||
return 1
|
||||
fi
|
||||
|
||||
return 0
|
||||
}
|
||||
|
||||
|
||||
# Scrape out SSL distribution config info from vm.args into $SSL_DIST_CONFIG
|
||||
rm -f $SSL_DIST_CONFIG
|
||||
sed -n '/Begin SSL distribution items/,/End SSL distribution items/p' \
|
||||
$RUNNER_ETC_DIR/vm.args > $SSL_DIST_CONFIG
|
||||
|
||||
# Check the first argument for instructions
|
||||
case "$1" in
|
||||
start)
|
||||
# Make sure there is not already a node running
|
||||
RES=`ping_node`
|
||||
if [ "$RES" = "pong" ]; then
|
||||
echo "Node is already running!"
|
||||
exit 1
|
||||
fi
|
||||
# Sanity check the emqttd.config file
|
||||
RES=`$NODETOOL_LITE chkconfig $RUNNER_ETC_DIR/emqttd.config`
|
||||
if [ $? != 0 ]; then
|
||||
echo "Error reading $RUNNER_ETC_DIR/emqttd.config"
|
||||
echo $RES
|
||||
exit 1
|
||||
fi
|
||||
HEART_COMMAND="$RUNNER_SCRIPT_DIR/$SCRIPT start"
|
||||
export HEART_COMMAND
|
||||
mkdir -p $PIPE_DIR
|
||||
$ERTS_PATH/run_erl -daemon $PIPE_DIR $RUNNER_LOG_DIR \
|
||||
"exec $RUNNER_SCRIPT_DIR/$SCRIPT console" 2>&1
|
||||
|
||||
# Wait for the node to come up. We can't just ping it because
|
||||
# distributed erlang comes up for a second before emqttd crashes
|
||||
# (eg. in the case of an unwriteable disk). Once the node comes
|
||||
# up we check for the node watcher process. If that's running
|
||||
# then we assume things are good enough. This will at least let
|
||||
# the user know when emqttd is crashing right after startup.
|
||||
WAIT=${WAIT_FOR_ERLANG:-15}
|
||||
while [ $WAIT -gt 0 ]; do
|
||||
WAIT=`expr $WAIT - 1`
|
||||
sleep 1
|
||||
RES=`ping_node`
|
||||
if [ "$?" -ne 0 ]; then
|
||||
continue
|
||||
fi
|
||||
echo "emqttd is started successfully!"
|
||||
exit 0
|
||||
done
|
||||
echo "emqttd failed to start within ${WAIT_FOR_ERLANG:-15} seconds,"
|
||||
echo "see the output of 'emqttd console' for more information."
|
||||
echo "If you want to wait longer, set the environment variable"
|
||||
echo "WAIT_FOR_ERLANG to the number of seconds to wait."
|
||||
exit 1
|
||||
;;
|
||||
|
||||
stop)
|
||||
UNAME_S=`uname -s`
|
||||
case $UNAME_S in
|
||||
Darwin)
|
||||
# Make sure we explicitly set this because iTerm.app doesn't for
|
||||
# some reason.
|
||||
COMMAND_MODE=unix2003
|
||||
esac
|
||||
|
||||
# Get the PID from nodetool
|
||||
get_pid
|
||||
GPR=$?
|
||||
if [ "$GPR" -ne 0 ] || [ -z $PID ]; then
|
||||
exit $GPR
|
||||
fi
|
||||
|
||||
# Tell nodetool to initiate a stop
|
||||
$NODETOOL stop
|
||||
ES=$?
|
||||
if [ "$ES" -ne 0 ]; then
|
||||
exit $ES
|
||||
fi
|
||||
|
||||
# Wait for the node to completely stop...
|
||||
while `kill -s 0 $PID 2>/dev/null`;
|
||||
do
|
||||
sleep 1
|
||||
done
|
||||
;;
|
||||
|
||||
restart)
|
||||
## Restart the VM without exiting the process
|
||||
$NODETOOL restart
|
||||
ES=$?
|
||||
if [ "$ES" -ne 0 ]; then
|
||||
exit $ES
|
||||
fi
|
||||
;;
|
||||
|
||||
reboot)
|
||||
## Restart the VM completely (uses heart to restart it)
|
||||
$NODETOOL reboot
|
||||
ES=$?
|
||||
if [ "$ES" -ne 0 ]; then
|
||||
exit $ES
|
||||
fi
|
||||
;;
|
||||
|
||||
ping)
|
||||
## See if the VM is alive
|
||||
ping_node
|
||||
ES=$?
|
||||
if [ "$ES" -ne 0 ]; then
|
||||
exit $ES
|
||||
fi
|
||||
;;
|
||||
|
||||
attach)
|
||||
if [ "$2" = "-f" ]; then
|
||||
echo "Forcing connection..."
|
||||
else
|
||||
# Make sure a node is running
|
||||
RES=`ping_node`
|
||||
ES=$?
|
||||
if [ "$ES" -ne 0 ]; then
|
||||
echo "Node is not running!"
|
||||
exit $ES
|
||||
fi
|
||||
fi
|
||||
|
||||
shift
|
||||
exec $ERTS_PATH/to_erl $PIPE_DIR
|
||||
;;
|
||||
|
||||
console)
|
||||
RES=`ping_node`
|
||||
if [ "$RES" = "pong" ]; then
|
||||
echo "Node is already running - use '$SCRIPT attach' instead"
|
||||
exit 1
|
||||
fi
|
||||
# Sanity check the emqttd.config file
|
||||
RES=`$NODETOOL_LITE chkconfig $RUNNER_ETC_DIR/emqttd.config`
|
||||
if [ $? != 0 ]; then
|
||||
echo "Error reading $RUNNER_ETC_DIR/emqttd.config"
|
||||
echo $RES
|
||||
exit 1
|
||||
fi
|
||||
# Setup beam-required vars
|
||||
ROOTDIR=$RUNNER_BASE_DIR
|
||||
ERL_LIBS=$ROOTDIR/plugins
|
||||
BINDIR=$ROOTDIR/erts-$ERTS_VSN/bin
|
||||
EMU=beam
|
||||
PROGNAME=`echo $0 | sed 's/.*\///'`
|
||||
# Setup Mnesia Dir
|
||||
MNESIA_DIR="$RUNNER_DATA_DIR/mnesia/$NODE_NAME"
|
||||
CMD="$BINDIR/erlexec -boot $RUNNER_BASE_DIR/releases/$APP_VSN/$SCRIPT \
|
||||
-embedded -config $RUNNER_ETC_DIR/emqttd.config \
|
||||
-pa $RUNNER_LIB_DIR/basho-patches \
|
||||
-mnesia dir "\"${MNESIA_DIR}\"" \
|
||||
-args_file $RUNNER_ETC_DIR/vm.args -- ${1+"$@"}"
|
||||
export EMU
|
||||
export ROOTDIR
|
||||
export ERL_LIBS
|
||||
export BINDIR
|
||||
export PROGNAME
|
||||
|
||||
# Dump environment info for logging purposes
|
||||
echo "Exec: $CMD"
|
||||
echo "Root: $ROOTDIR"
|
||||
|
||||
# Log the startup
|
||||
logger -t "$SCRIPT[$$]" "Starting up"
|
||||
|
||||
# Start the VM
|
||||
exec $CMD
|
||||
;;
|
||||
chkconfig)
|
||||
RES=`$NODETOOL_LITE chkconfig $RUNNER_ETC_DIR/emqttd.config`
|
||||
if [ $? != 0 ]; then
|
||||
echo "Error reading $RUNNER_ETC_DIR/emqttd.config"
|
||||
echo $RES
|
||||
exit 1
|
||||
fi
|
||||
echo "config is OK"
|
||||
;;
|
||||
escript)
|
||||
shift
|
||||
$ERTS_PATH/escript "$@"
|
||||
;;
|
||||
version)
|
||||
echo $RIAK_VERSION
|
||||
;;
|
||||
getpid)
|
||||
# Get the PID from nodetool
|
||||
get_pid
|
||||
ES=$?
|
||||
if [ "$ES" -ne 0 ] || [ -z $PID ]; then
|
||||
exit $ES
|
||||
fi
|
||||
echo $PID
|
||||
;;
|
||||
*)
|
||||
echo "Usage: $SCRIPT {start|stop|restart|reboot|ping|console|attach|chkconfig|escript|version|getpid}"
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
exit 0
|
||||
|
|
@ -1,108 +0,0 @@
|
|||
@echo off
|
||||
@setlocal
|
||||
@setlocal enabledelayedexpansion
|
||||
|
||||
@set node_name=emqttd
|
||||
|
||||
@rem Get the absolute path to the parent directory,
|
||||
@rem which is assumed to be the node root.
|
||||
@for /F "delims=" %%I in ("%~dp0..") do @set node_root=%%~fI
|
||||
|
||||
@set releases_dir=%node_root%\releases
|
||||
@set runner_etc_dir=%node_root%\etc
|
||||
|
||||
@rem Parse ERTS version and release version from start_erl.data
|
||||
@for /F "usebackq tokens=1,2" %%I in ("%releases_dir%\start_erl.data") do @(
|
||||
@call :set_trim erts_version %%I
|
||||
@call :set_trim release_version %%J
|
||||
)
|
||||
|
||||
@set vm_args=%runner_etc_dir%\vm.args
|
||||
@set sys_config=%runner_etc_dir%\emqttd.config
|
||||
@set node_boot_script=%releases_dir%\%release_version%\%node_name%
|
||||
@set clean_boot_script=%releases_dir%\%release_version%\start_clean
|
||||
|
||||
@rem extract erlang cookie from vm.args
|
||||
@for /f "usebackq tokens=1-2" %%I in (`findstr /b \-setcookie "%vm_args%"`) do @set erlang_cookie=%%J
|
||||
|
||||
@set erts_bin=%node_root%\erts-%erts_version%\bin
|
||||
|
||||
@set service_name=%node_name%_%release_version%
|
||||
|
||||
@set erlsrv="%erts_bin%\erlsrv.exe"
|
||||
@set epmd="%erts_bin%\epmd.exe"
|
||||
@set escript="%erts_bin%\escript.exe"
|
||||
@set werl="%erts_bin%\werl.exe"
|
||||
|
||||
@if "%1"=="usage" @goto usage
|
||||
@if "%1"=="install" @goto install
|
||||
@if "%1"=="uninstall" @goto uninstall
|
||||
@if "%1"=="start" @goto start
|
||||
@if "%1"=="stop" @goto stop
|
||||
@if "%1"=="restart" @call :stop && @goto start
|
||||
@if "%1"=="console" @goto console
|
||||
@if "%1"=="query" @goto query
|
||||
@if "%1"=="attach" @goto attach
|
||||
@if "%1"=="upgrade" @goto upgrade
|
||||
@echo Unknown command: "%1"
|
||||
|
||||
:usage
|
||||
@echo Usage: %~n0 [install^|uninstall^|start^|stop^|restart^|console^|query^|attach^|upgrade]
|
||||
@goto :EOF
|
||||
|
||||
:install
|
||||
@set description=Erlang node %node_name% in %node_root%
|
||||
@set start_erl=%node_root%\bin\start_erl.cmd
|
||||
@set args= ++ %node_name% ++ %node_root%
|
||||
@%erlsrv% add %service_name% -c "%description%" -sname %node_name% -w "%node_root%" -m "%start_erl%" -args "%args%" -stopaction "init:stop()."
|
||||
@goto :EOF
|
||||
|
||||
:uninstall
|
||||
@%erlsrv% remove %service_name%
|
||||
@%epmd% -kill
|
||||
@goto :EOF
|
||||
|
||||
:start
|
||||
@%erlsrv% start %service_name%
|
||||
@goto :EOF
|
||||
|
||||
:stop
|
||||
@%erlsrv% stop %service_name%
|
||||
@goto :EOF
|
||||
|
||||
:console
|
||||
set dest_path=%~dp0
|
||||
cd /d !dest_path!..\plugins
|
||||
set current_path=%cd%
|
||||
set plugins=
|
||||
for /d %%P in (*) do (
|
||||
set "plugins=!plugins!"!current_path!\%%P\ebin" "
|
||||
)
|
||||
cd /d %node_root%
|
||||
|
||||
@start "%node_name% console" %werl% -boot "%node_boot_script%" -config "%sys_config%" -args_file "%vm_args%" -sname %node_name% -pa %plugins%
|
||||
@goto :EOF
|
||||
|
||||
:query
|
||||
@%erlsrv% list %service_name%
|
||||
@exit %ERRORLEVEL%
|
||||
@goto :EOF
|
||||
|
||||
:attach
|
||||
@for /f "usebackq" %%I in (`hostname`) do @set hostname=%%I
|
||||
start "%node_name% attach" %werl% -boot "%clean_boot_script%" -remsh %node_name%@%hostname% -sname console -setcookie %erlang_cookie%
|
||||
@goto :EOF
|
||||
|
||||
:upgrade
|
||||
@if "%2"=="" (
|
||||
@echo Missing upgrade package argument
|
||||
@echo Usage: %~n0 upgrade {package base name}
|
||||
@echo NOTE {package base name} MUST NOT include the .tar.gz suffix
|
||||
@goto :EOF
|
||||
)
|
||||
@%escript% %node_root%\bin\install_upgrade.escript %node_name% %erlang_cookie% %2
|
||||
@goto :EOF
|
||||
|
||||
:set_trim
|
||||
@set %1=%2
|
||||
@goto :EOF
|
||||
|
|
@ -1,300 +0,0 @@
|
|||
% -*- mode: erlang;erlang-indent-level: 4;indent-tabs-mode: nil -*-
|
||||
%% ex: ft=erlang ts=4 sw=4 et
|
||||
[{kernel, [
|
||||
{start_timer, true},
|
||||
{start_pg2, true}
|
||||
]},
|
||||
{sasl, [
|
||||
{sasl_error_logger, {file, "emqttd_sasl.log"}}
|
||||
]},
|
||||
{ssl, [
|
||||
%{versions, ['tlsv1.2', 'tlsv1.1']}
|
||||
]},
|
||||
{lager, [
|
||||
{colored, true},
|
||||
{async_threshold, 1000},
|
||||
{error_logger_redirect, false},
|
||||
{crash_log, "log/emqttd_crash.log"},
|
||||
{handlers, [
|
||||
{lager_console_backend, info},
|
||||
%%NOTICE: Level >= error
|
||||
%%{lager_emqtt_backend, error},
|
||||
{lager_file_backend, [
|
||||
{formatter_config, [time, " ", pid, " [",severity,"] ", message, "\n"]},
|
||||
{file, "log/emqttd_info.log"},
|
||||
{level, info},
|
||||
{size, 104857600},
|
||||
{date, "$D0"},
|
||||
{count, 30}
|
||||
]},
|
||||
{lager_file_backend, [
|
||||
{formatter_config, [time, " ", pid, " [",severity,"] ", message, "\n"]},
|
||||
{file, "log/emqttd_error.log"},
|
||||
{level, error},
|
||||
{size, 104857600},
|
||||
{date, "$D0"},
|
||||
{count, 30}
|
||||
]}
|
||||
]}
|
||||
]},
|
||||
{esockd, [
|
||||
{logger, {lager, info}}
|
||||
]},
|
||||
{emqttd, [
|
||||
%% Authentication and Authorization
|
||||
{access, [
|
||||
%% Authetication. Anonymous Default
|
||||
{auth, [
|
||||
%% Authentication with username, password
|
||||
%% {username, [{test, "password"}, {"test1", "password1"}]},
|
||||
|
||||
%% Authentication with clientid
|
||||
%{clientid, [{password, no}, {file, "etc/clients.config"}]},
|
||||
|
||||
%% Authentication with LDAP
|
||||
% {ldap, [
|
||||
% {servers, ["localhost"]},
|
||||
% {port, 389},
|
||||
% {timeout, 30},
|
||||
% {user_dn, "uid=$u,ou=People,dc=example,dc=com"},
|
||||
% {ssl, fasle},
|
||||
% {sslopts, [
|
||||
% {"certfile", "ssl.crt"},
|
||||
% {"keyfile", "ssl.key"}]}
|
||||
% ]},
|
||||
|
||||
%% Allow all
|
||||
{anonymous, []}
|
||||
]},
|
||||
%% ACL config
|
||||
{acl, [
|
||||
%% Internal ACL module
|
||||
%% {internal, [{file, "testdata/test_acl.config"}, {nomatch, allow}]}
|
||||
]}
|
||||
]},
|
||||
%% MQTT Protocol Options
|
||||
{mqtt, [
|
||||
%% Packet
|
||||
{packet, [
|
||||
%% Max ClientId Length Allowed
|
||||
{max_clientid_len, 1024},
|
||||
%% Max Packet Size Allowed, 64K default
|
||||
{max_packet_size, 65536}
|
||||
]},
|
||||
%% Client
|
||||
{client, [
|
||||
%% Socket is connected, but no 'CONNECT' packet received
|
||||
{idle_timeout, 10} %% seconds
|
||||
]},
|
||||
%% Session
|
||||
{session, [
|
||||
%% Max number of QoS 1 and 2 messages that can be “in flight” at one time.
|
||||
%% 0 means no limit
|
||||
{max_inflight, 100},
|
||||
|
||||
%% Retry interval for redelivering QoS1/2 messages.
|
||||
{unack_retry_interval, 20},
|
||||
|
||||
%% Awaiting PUBREL Timeout
|
||||
{await_rel_timeout, 20},
|
||||
|
||||
%% Max Packets that Awaiting PUBREL, 0 means no limit
|
||||
{max_awaiting_rel, 0},
|
||||
|
||||
%% Statistics Collection Interval(seconds)
|
||||
{collect_interval, 20},
|
||||
|
||||
%% Expired after 2 day (unit: minute)
|
||||
{expired_after, 2880}
|
||||
|
||||
]},
|
||||
%% Queue
|
||||
{queue, [
|
||||
%% simple | priority
|
||||
{type, simple},
|
||||
|
||||
%% Topic Priority: 0~255, Default is 0
|
||||
%% {priority, [{"topic/1", 10}, {"topic/2", 8}]},
|
||||
|
||||
%% Max queue length. Enqueued messages when persistent client disconnected,
|
||||
%% or inflight window is full.
|
||||
{max_length, infinity},
|
||||
|
||||
%% Low-water mark of queued messages
|
||||
{low_watermark, 0.2},
|
||||
|
||||
%% High-water mark of queued messages
|
||||
{high_watermark, 0.6},
|
||||
|
||||
%% Queue Qos0 messages?
|
||||
{queue_qos0, true}
|
||||
]}
|
||||
]},
|
||||
%% Broker Options
|
||||
{broker, [
|
||||
%% System interval of publishing broker $SYS messages
|
||||
{sys_interval, 60},
|
||||
|
||||
%% Retained messages
|
||||
{retained, [
|
||||
%% Expired after seconds, never expired if 0
|
||||
{expired_after, 0},
|
||||
|
||||
%% Max number of retained messages
|
||||
{max_message_num, 100000},
|
||||
|
||||
%% Max Payload Size of retained message
|
||||
{max_playload_size, 65536}
|
||||
]},
|
||||
|
||||
%% PubSub and Router
|
||||
{pubsub, [
|
||||
%% Default should be scheduler numbers
|
||||
{pool_size, 8},
|
||||
|
||||
%% Route aging time(seconds)
|
||||
{route_aging, 5}
|
||||
]},
|
||||
|
||||
%% Bridge
|
||||
{bridge, [
|
||||
%%TODO: bridge queue size
|
||||
{max_queue_len, 10000},
|
||||
|
||||
%% Ping Interval of bridge node
|
||||
{ping_down_interval, 1} %seconds
|
||||
]}
|
||||
]},
|
||||
%% Modules
|
||||
{modules, [
|
||||
%% Client presence management module.
|
||||
%% Publish messages when client connected or disconnected
|
||||
{presence, [{qos, 0}]},
|
||||
|
||||
%% Subscribe topics automatically when client connected
|
||||
{subscription, [
|
||||
|
||||
%% $c will be replaced by clientid
|
||||
%% {"$queue/clients/$c", 1},
|
||||
|
||||
%% Static subscriptions from backend
|
||||
backend
|
||||
]}
|
||||
|
||||
%% Rewrite rules
|
||||
%% {rewrite, [{file, "etc/rewrite.config"}]}
|
||||
]},
|
||||
%% Plugins
|
||||
{plugins, [
|
||||
%% Plugin App Library Dir
|
||||
{plugins_dir, "./plugins"},
|
||||
|
||||
%% File to store loaded plugin names.
|
||||
{loaded_file, "./data/loaded_plugins"}
|
||||
]},
|
||||
|
||||
%% Listeners
|
||||
{listeners, [
|
||||
{mqtt, 1883, [
|
||||
%% Size of acceptor pool
|
||||
{acceptors, 16},
|
||||
|
||||
%% Maximum number of concurrent clients
|
||||
{max_clients, 512},
|
||||
|
||||
%% Socket Access Control
|
||||
{access, [{allow, all}]},
|
||||
|
||||
%% Connection Options
|
||||
{connopts, [
|
||||
%% Rate Limit. Format is 'burst, rate', Unit is KB/Sec
|
||||
%% {rate_limit, "100,10"} %% 100K burst, 10K rate
|
||||
]},
|
||||
|
||||
%% Socket Options
|
||||
{sockopts, [
|
||||
%Set buffer if hight thoughtput
|
||||
%{recbuf, 4096},
|
||||
%{sndbuf, 4096},
|
||||
%{buffer, 4096},
|
||||
%{nodelay, true},
|
||||
{backlog, 512}
|
||||
]}
|
||||
]},
|
||||
|
||||
{mqtts, 8883, [
|
||||
%% Size of acceptor pool
|
||||
{acceptors, 4},
|
||||
|
||||
%% Maximum number of concurrent clients
|
||||
{max_clients, 512},
|
||||
|
||||
%% Socket Access Control
|
||||
{access, [{allow, all}]},
|
||||
|
||||
%% SSL certificate and key files
|
||||
{ssl, [{certfile, "etc/ssl/ssl.crt"},
|
||||
{keyfile, "etc/ssl/ssl.key"}]},
|
||||
|
||||
%% Socket Options
|
||||
{sockopts, [
|
||||
{backlog, 1024}
|
||||
%{buffer, 4096},
|
||||
]}
|
||||
]},
|
||||
%% WebSocket over HTTPS Listener
|
||||
%% {https, 8083, [
|
||||
%% %% Size of acceptor pool
|
||||
%% {acceptors, 4},
|
||||
%% %% Maximum number of concurrent clients
|
||||
%% {max_clients, 512},
|
||||
%% %% Socket Access Control
|
||||
%% {access, [{allow, all}]},
|
||||
%% %% SSL certificate and key files
|
||||
%% {ssl, [{certfile, "etc/ssl/ssl.crt"},
|
||||
%% {keyfile, "etc/ssl/ssl.key"}]},
|
||||
%% %% Socket Options
|
||||
%% {sockopts, [
|
||||
%% %{buffer, 4096},
|
||||
%% {backlog, 1024}
|
||||
%% ]}
|
||||
%%]},
|
||||
|
||||
%% HTTP and WebSocket Listener
|
||||
{http, 8083, [
|
||||
%% Size of acceptor pool
|
||||
{acceptors, 4},
|
||||
%% Maximum number of concurrent clients
|
||||
{max_clients, 64},
|
||||
%% Socket Access Control
|
||||
{access, [{allow, all}]},
|
||||
%% Socket Options
|
||||
{sockopts, [
|
||||
{backlog, 1024}
|
||||
%{buffer, 4096},
|
||||
]}
|
||||
]}
|
||||
]},
|
||||
|
||||
%% Erlang System Monitor
|
||||
{sysmon, [
|
||||
%% Long GC
|
||||
{long_gc, 100},
|
||||
|
||||
%% Long Schedule(ms)
|
||||
{long_schedule, 100},
|
||||
|
||||
%% 8M words. 32MB on 32-bit VM, 64MB on 64-bit VM.
|
||||
%% 8 * 1024 * 1024
|
||||
{large_heap, 8388608},
|
||||
|
||||
%% Busy Port
|
||||
{busy_port, true},
|
||||
|
||||
%% Busy Dist Port
|
||||
{busy_dist_port, true}
|
||||
|
||||
]}
|
||||
]}
|
||||
].
|
||||
|
||||
|
|
@ -1,14 +0,0 @@
|
|||
%%%-----------------------------------------------------------------------------
|
||||
%%
|
||||
%% [Rewrite](https://github.com/emqtt/emqttd/wiki/Rewrite)
|
||||
%%
|
||||
%%%-----------------------------------------------------------------------------
|
||||
|
||||
%{topic, "x/#", [
|
||||
% {rewrite, "^x/y/(.+)$", "z/y/$1"},
|
||||
% {rewrite, "^x/(.+)$", "y/$1"}
|
||||
%]}.
|
||||
|
||||
%{topic, "y/+/z/#", [
|
||||
% {rewrite, "^y/(.+)/z/(.+)$", "y/z/$2"}
|
||||
%]}.
|
||||
|
|
@ -1,98 +0,0 @@
|
|||
%% -*- mode: erlang;erlang-indent-level: 4;indent-tabs-mode: nil -*-
|
||||
%% ex: ft=erlang ts=4 sw=4 et
|
||||
{sys, [
|
||||
{lib_dirs, ["../deps"]},
|
||||
{erts, [{mod_cond, derived}, {app_file, strip}]},
|
||||
{app_file, strip},
|
||||
{rel, "emqttd", git,
|
||||
[
|
||||
kernel,
|
||||
stdlib,
|
||||
sasl,
|
||||
asn1,
|
||||
syntax_tools,
|
||||
ssl,
|
||||
crypto,
|
||||
eldap,
|
||||
xmerl,
|
||||
os_mon,
|
||||
inets,
|
||||
goldrush,
|
||||
compiler,
|
||||
runtime_tools,
|
||||
{observer, load},
|
||||
lager,
|
||||
gen_logger,
|
||||
gproc,
|
||||
esockd,
|
||||
mochiweb,
|
||||
emqttd
|
||||
]},
|
||||
{rel, "start_clean", "",
|
||||
[
|
||||
kernel,
|
||||
stdlib
|
||||
]},
|
||||
{boot_rel, "emqttd"},
|
||||
{profile, embedded},
|
||||
{incl_cond, exclude},
|
||||
%{mod_cond, derived},
|
||||
{excl_archive_filters, [".*"]}, %% Do not archive built libs
|
||||
{excl_sys_filters, ["^bin/(?!start_clean.boot)",
|
||||
"^erts.*/bin/(dialyzer|typer)",
|
||||
"^erts.*/(doc|info|include|lib|man|src)"]},
|
||||
{excl_app_filters, ["\.gitignore"]},
|
||||
{app, kernel, [{incl_cond, include}]},
|
||||
{app, stdlib, [{incl_cond, include}]},
|
||||
{app, sasl, [{incl_cond, include}]},
|
||||
{app, asn1, [{incl_cond, include}]},
|
||||
{app, crypto, [{incl_cond, include}]},
|
||||
{app, ssl, [{incl_cond, include}]},
|
||||
{app, xmerl, [{incl_cond, include}]},
|
||||
{app, os_mon, [{incl_cond, include}]},
|
||||
{app, syntax_tools, [{incl_cond, include}]},
|
||||
{app, public_key, [{incl_cond, include}]},
|
||||
{app, mnesia, [{incl_cond, include}]},
|
||||
{app, eldap, [{incl_cond, include}]},
|
||||
{app, inets, [{incl_cond, include}]},
|
||||
{app, compiler, [{incl_cond, include}]},
|
||||
{app, runtime_tools, [{incl_cond, include}]},
|
||||
{app, observer, [{incl_cond, include}]},
|
||||
{app, goldrush, [{incl_cond, include}]},
|
||||
{app, gen_logger, [{incl_cond, include}]},
|
||||
{app, lager, [{incl_cond, include}]},
|
||||
{app, gproc, [{incl_cond, include}]},
|
||||
{app, esockd, [{mod_cond, app}, {incl_cond, include}]},
|
||||
{app, mochiweb, [{mod_cond, app}, {incl_cond, include}]},
|
||||
{app, emqttd, [{mod_cond, app}, {incl_cond, include}, {lib_dir, ".."}]}
|
||||
]}.
|
||||
|
||||
{target_dir, "emqttd"}.
|
||||
|
||||
{overlay_vars, "vars.config"}.
|
||||
|
||||
{overlay, [
|
||||
{mkdir, "log/"},
|
||||
{mkdir, "etc/"},
|
||||
{mkdir, "etc/ssl/"},
|
||||
{mkdir, "data/"},
|
||||
{mkdir, "data/mnesia"},
|
||||
{mkdir, "plugins/"},
|
||||
{copy, "files/erl", "\{\{erts_vsn\}\}/bin/erl"},
|
||||
{template, "files/nodetool", "\{\{erts_vsn\}\}/bin/nodetool"},
|
||||
{template, "files/emqttd", "bin/emqttd"},
|
||||
{template, "files/emqttd_ctl", "bin/emqttd_ctl"},
|
||||
{template, "files/emqttd_top", "bin/emqttd_top"},
|
||||
{template, "files/emqttd.cmd", "bin/emqttd.cmd"},
|
||||
{copy, "files/start_erl.cmd", "bin/start_erl.cmd"},
|
||||
{copy, "files/install_upgrade.escript", "bin/install_upgrade.escript"},
|
||||
{copy, "files/ssl/ssl.crt", "etc/ssl/ssl.crt"},
|
||||
{copy, "files/ssl/ssl.key", "etc/ssl/ssl.key"},
|
||||
{template, "files/emqttd.config.production", "etc/emqttd.config"},
|
||||
{template, "files/emqttd.config.development", "etc/emqttd.config.development"},
|
||||
{template, "files/acl.config", "etc/acl.config"},
|
||||
{template, "files/rewrite.config", "etc/rewrite.config"},
|
||||
{template, "files/clients.config", "etc/clients.config"},
|
||||
{template, "files/vm.args", "etc/vm.args"},
|
||||
{copy, "files/loaded_plugins", "data/loaded_plugins"}
|
||||
]}.
|
||||
|
|
@ -1,18 +0,0 @@
|
|||
%% -*- mode: erlang;erlang-indent-level: 4;indent-tabs-mode: nil -*-
|
||||
%% ex: ft=erlang ts=4 sw=4 et
|
||||
|
||||
Sys = proplists:get_value(sys, CONFIG),
|
||||
IncludeApps = [App || {app, App, _} <- Sys],
|
||||
|
||||
[DepsDir] = proplists:get_value(lib_dirs, Sys),
|
||||
DepApps = lists:map(fun(AppFile) ->
|
||||
{ok, [{application, Name, Attrs}]}
|
||||
= file:consult(filename:join(DepsDir, AppFile)),
|
||||
Name
|
||||
end, filelib:wildcard("*/ebin/*.app", DepsDir)),
|
||||
AppendApps = DepApps -- IncludeApps,
|
||||
Cond = [{mod_cond, app}, {incl_cond, include}],
|
||||
|
||||
NewSys = lists:append(Sys, [{app, App, Cond} || App <- AppendApps]),
|
||||
|
||||
lists:keyreplace(sys, 1, CONFIG, {sys, NewSys}).
|
||||
|
|
@ -1,28 +0,0 @@
|
|||
%% -*- mode: erlang;erlang-indent-level: 4;indent-tabs-mode: nil -*-
|
||||
%% ex: ft=erlang ts=4 sw=4 et
|
||||
|
||||
%% Platform-specific installation paths
|
||||
{platform_bin_dir, "./bin"}.
|
||||
{platform_data_dir, "./var/data"}.
|
||||
{platform_etc_dir, "./etc"}.
|
||||
{platform_lib_dir, "./lib"}.
|
||||
{platform_log_dir, "./log"}.
|
||||
|
||||
%%
|
||||
%% etc/emqttd.config
|
||||
%%
|
||||
|
||||
|
||||
%%
|
||||
%% etc/vm.args
|
||||
%%
|
||||
|
||||
%%
|
||||
%% bin/emqttd
|
||||
%%
|
||||
{runner_script_dir, "$(cd ${0%/*} && pwd)"}.
|
||||
{runner_base_dir, "${RUNNER_SCRIPT_DIR%/*}"}.
|
||||
{runner_etc_dir, "$RUNNER_BASE_DIR/etc"}.
|
||||
{runner_log_dir, "$RUNNER_BASE_DIR/log"}.
|
||||
{pipe_dir, "/tmp/$RUNNER_SCRIPT/"}.
|
||||
{runner_user, ""}.
|
||||
|
|
@ -1,77 +0,0 @@
|
|||
%%--------------------------------------------------------------------
|
||||
%% Copyright (c) 2012-2016 Feng Lee <feng@emqtt.io>.
|
||||
%%
|
||||
%% Licensed under the Apache License, Version 2.0 (the "License");
|
||||
%% you may not use this file except in compliance with the License.
|
||||
%% You may obtain a copy of the License at
|
||||
%%
|
||||
%% http://www.apache.org/licenses/LICENSE-2.0
|
||||
%%
|
||||
%% Unless required by applicable law or agreed to in writing, software
|
||||
%% distributed under the License is distributed on an "AS IS" BASIS,
|
||||
%% WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
%% See the License for the specific language governing permissions and
|
||||
%% limitations under the License.
|
||||
%%--------------------------------------------------------------------
|
||||
|
||||
%% @doc LDAP Authentication Module
|
||||
-module(emqttd_auth_ldap).
|
||||
|
||||
-include("emqttd.hrl").
|
||||
|
||||
-import(proplists, [get_value/2, get_value/3]).
|
||||
|
||||
-behaviour(emqttd_auth_mod).
|
||||
|
||||
-export([init/1, check/3, description/0]).
|
||||
|
||||
-record(state, {servers, user_dn, options}).
|
||||
|
||||
init(Opts) ->
|
||||
Servers = get_value(servers, Opts, ["localhost"]),
|
||||
Port = get_value(port, Opts, 389),
|
||||
Timeout = get_value(timeout, Opts, 30),
|
||||
UserDn = get_value(user_dn, Opts),
|
||||
LdapOpts =
|
||||
case get_value(ssl, Opts, false) of
|
||||
true ->
|
||||
SslOpts = get_value(sslopts, Opts),
|
||||
[{port, Port}, {timeout, Timeout}, {sslopts, SslOpts}];
|
||||
false ->
|
||||
[{port, Port}, {timeout, Timeout}]
|
||||
end,
|
||||
{ok, #state{servers = Servers, user_dn = UserDn, options = LdapOpts}}.
|
||||
|
||||
check(#mqtt_client{username = undefined}, _Password, _State) ->
|
||||
{error, username_undefined};
|
||||
check(_Client, undefined, _State) ->
|
||||
{error, password_undefined};
|
||||
check(_Client, <<>>, _State) ->
|
||||
{error, password_undefined};
|
||||
check(#mqtt_client{username = Username}, Password,
|
||||
#state{servers = Servers, user_dn = UserDn, options = Options}) ->
|
||||
case eldap:open(Servers, Options) of
|
||||
{ok, LDAP} ->
|
||||
UserDn1 = fill(binary_to_list(Username), UserDn),
|
||||
ldap_bind(LDAP, UserDn1, binary_to_list(Password));
|
||||
{error, Reason} ->
|
||||
{error, Reason}
|
||||
end.
|
||||
|
||||
ldap_bind(LDAP, UserDn, Password) ->
|
||||
case catch eldap:simple_bind(LDAP, UserDn, Password) of
|
||||
ok ->
|
||||
ok;
|
||||
{error, invalidCredentials} ->
|
||||
{error, invalid_credentials};
|
||||
{error, Error} ->
|
||||
{error, Error};
|
||||
{'EXIT', Reason} ->
|
||||
{error, Reason}
|
||||
end.
|
||||
|
||||
fill(Username, UserDn) ->
|
||||
re:replace(UserDn, "\\$u", Username, [global, {return, list}]).
|
||||
|
||||
description() -> "LDAP Authentication Module".
|
||||
|
||||
Loading…
Reference in New Issue