diff --git a/docs/cn/acl/user_guide.md b/docs/cn/acl/user_guide.md index 463a28d8ce4..c3502301489 100644 --- a/docs/cn/acl/user_guide.md +++ b/docs/cn/acl/user_guide.md @@ -34,7 +34,8 @@ ACL客户端可以参考:**org.apache.rocketmq.example.simple**包下面的**A 具体可以参考**distribution/conf/plain_acl.yml**配置文件 ## 3. 支持权限控制的集群部署 -在**distribution/conf/plain_acl.yml**配置文件中按照上述说明定义好权限属性后,打开**aclEnable**开关变量即可开启RocketMQ集群的ACL特性。这里贴出Broker端开启ACL特性的properties配置文件内容: +在**distribution/conf/plain_acl.yml**配置文件中按照上述说明定义好权限属性后,在Broker配置文件中设置以下属性即可开启RocketMQ集群的ACL特性: + ``` brokerClusterName=DefaultCluster brokerName=broker-a @@ -48,6 +49,12 @@ storePathCommitLog=/data/rocketmq/commitlog-a-m autoCreateSubscriptionGroup=true ## if acl is open,the flag will be true aclEnable=true +## RocketMQ 5.x 需要额外配置以下ACL属性 +authenticationEnabled=true +authorizationEnabled=true +migrateAuthFromV1Enabled=true +authenticationMetadataProvider=org.apache.rocketmq.auth.authentication.provider.LocalAuthenticationMetadataProvider +authorizationMetadataProvider=org.apache.rocketmq.auth.authorization.provider.LocalAuthorizationMetadataProvider listenPort=10911 brokerIP1=XX.XX.XX.XX1 namesrvAddr=XX.XX.XX.XX:9876 diff --git a/docs/en/acl/Operations_ACL.md b/docs/en/acl/Operations_ACL.md index 0651ea8b060..95ab8bb2980 100644 --- a/docs/en/acl/Operations_ACL.md +++ b/docs/en/acl/Operations_ACL.md @@ -33,7 +33,8 @@ The definition of Topic resource access control for RocketMQ is mainly as shown For details, please refer to the **distribution/conf/plain_acl.yml** configuration file. ## 3. Cluster deployment with permission control -After defining the permission attribute in the **distribution/conf/plain_acl.yml** configuration file as described above, open the **aclEnable** switch variable to enable the ACL feature of the RocketMQ cluster.The configuration file of the ACL feature enabled on the broker is as follows: +After defining the permission attribute in the **distribution/conf/plain_acl.yml** configuration file as described above, enable the ACL feature by setting the following properties in the broker configuration file: + ```properties brokerClusterName=DefaultCluster brokerName=broker-a @@ -47,6 +48,12 @@ storePathCommitLog=/data/rocketmq/commitlog-a-m autoCreateSubscriptionGroup=true ## if acl is open,the flag will be true aclEnable=true +## RocketMQ 5.x requires the following additional ACL properties +authenticationEnabled=true +authorizationEnabled=true +migrateAuthFromV1Enabled=true +authenticationMetadataProvider=org.apache.rocketmq.auth.authentication.provider.LocalAuthenticationMetadataProvider +authorizationMetadataProvider=org.apache.rocketmq.auth.authorization.provider.LocalAuthorizationMetadataProvider listenPort=10911 brokerIP1=XX.XX.XX.XX1 namesrvAddr=XX.XX.XX.XX:9876