username: Username for client non-ssl connection password: Password for client connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` means subscription operation type, support `+` and `#` wildcards. - username: Username for client ssl connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` means subscription username: two-way-tls permissions: - action: 'pub' permit: ['tls/#'] - action: 'sub' permit: ['tls/#'] - username: test password: hahaha permissions: - action: 'pub'

authentication. - username: Username for client non-ssl connection password: Password for client connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` ˓→means subscription operation type, support `+` and `#` ˓→wildcards. - username: Username for client ssl connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` ˓→means subscription principals: - username: two-way-tls permissions: - action: 'pub' permit: ['tls/#'] - action: 'sub' permit: ['tls/#'] - username: test password: hahaha permissions: - action: 'pub' permit: ['#'] - action:

username: Username for client non-ssl connection password: Password for client connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` means subscription operation type, support `+` and `#` wildcards. - username: Username for client ssl connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` means subscription username: two-way-tls permissions: - action: 'pub' permit: ['tls/#'] - action: 'sub' permit: ['tls/#'] - username: test password: hahaha permissions: - action: 'pub'

authentication. - username: Username for client non-ssl connection password: Password for client connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` ˓→means subscription operation type, support `+` and `#` ˓→wildcards. - username: Username for client ssl connection permissions: - action: Operation type of permission. `pub` means publish permission, `sub` ˓→means subscription var/db/baetyl/cert/server.pem key: var/db/baetyl/cert/server.key principals: - username: two-way-tls permissions: - action: 'pub' permit: ['tls/#'] (continues on next page) 48 Chapter 7. Device connect to