MQTT not using home assistant users

cavejohnson · December 28, 2024, 1:47am

Installed home assistant on debian 12 using a supervisord install (containers). i have added the mqtt addon container and this works and can be configured through HA

However mqtt is not using my users from HA like i believe it should.

I created a new user for an mqtt app, gave it admin permissions etc. when i attempt to auth to mqtt with that user i get

2024-12-28 00:53:11: New connection from 172.16.30.163:50614 on port 1883.
2024-12-28 00:53:11: Client ESP32_ecE188 disconnected, not authorised.

have i missed a step on getting the two linked?

tmjpugh · December 28, 2024, 6:24am

Creating users for mosquitto is more difficult than it should be. You must run commands to set user password

cavejohnson · December 28, 2024, 10:43am

in the mosquitto broker configuration options, whats meant by

A list of local users that will be created with username and password. You don’t need to do this because you can use Home Assistant users too, without any configuration. You can also specify password_pre_hashed: true to utilize a pre-hashed password from the output of the pw command (which is present inside the container).

tmjpugh · December 28, 2024, 2:27pm

Are you using addon or docker container?

If addon look here. It says turn on “advanced” mode in addon and you get ui for user management I believe. I don’t use supervised or HAOS so this function doesn’t exist for me

If docker, please explain where you get info above? In docker I believe you must connect to mosquitto container command line and create user/passwd. This is what I do but it’s possible there is simple way

cavejohnson · December 28, 2024, 4:41pm

I am using the addon (installed via addons in the HA dashboard) in a supervisor install which as i understand it is container based.

I have advanced mode enabled in my profile, but i see no “user” section in the mosquitto broker settings other than this login section, which is where the above message about using HA users is mentioned

tmjpugh · December 28, 2024, 4:48pm

github.com

home-assistant/addons/blob/91160e1b5d00e13091b0537d85a3b3112e4a3f60/mosquitto/DOCS.md

# Home Assistant Add-on: Mosquitto broker

## Installation

Follow these steps to get the add-on installed on your system:

1. Navigate in your Home Assistant frontend to **Settings** -> **Add-ons** -> **Add-on store**.
2. Find the "Mosquitto broker" add-on and click it.
3. Click on the "INSTALL" button.

## How to use

The add-on has a couple of options available. To get the add-on running:

1. Start the add-on.
2. Have some patience and wait a couple of minutes.
3. Check the add-on log output to see the result.

Create a new user for MQTT via your Home Assistant's frontend **Settings** -> **People** -> **Users** , (i.e. not on Mosquitto's **Configuration** tab).
Notes:

This file has been truncated. show original

cavejohnson · December 28, 2024, 4:56pm

this is what i have followed up, its all up and running apart from using the HA user i created specifically for the mtqq application.

If i add a user under the mqtt configuration under logins in the screenshot above, i can auth to mqtt, so it seems like there is an issue between HA and mqtt for user accounts

tmjpugh · December 28, 2024, 5:25pm

Lets go back to this
I originally believed you were using docker and provided incorrect info for addon

Just create a User/pass in Home Assistant users.
In that addon >> logins you may also create local users like so:

logins:
  - username: myuser
    password: mypassword
  - username: myuser2
    password: mypassword2

I don’t use the addon so I am not clear and would need to test differences between these but I believe HA users should just work with MQTT

May require restart after adding users