qpid-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Oleksandr Rudyy <oru...@gmail.com>
Subject Re: WELCOME to users@qpid.apache.org
Date Fri, 02 Oct 2015 09:07:55 GMT
Robbie,
You are correct. Thanks for the clarification.

It was almost mid-night when I replied into the thread. I was half sleeping
and did not provided the details about using PLAIN sasl mechanism on secure
and non-secure transports :)

On 2 October 2015 at 10:03, Robbie Gemmell <robbie.gemmell@gmail.com> wrote:

> On 1 October 2015 at 23:42, Oleksandr Rudyy <orudyy@gmail.com> wrote:
> > Hi Ram,
> >
> > Your Broker virtual host nodes configuration looks good. Could you
> > please clarify what exactly error message you are getting on the
> > client after you created virtual host and nodes?
> >
> > I noticed that in your connection string you explicitly specified
> > PLAIN sasl mechanism
> >
> (url=amqp://guest:********@/?brokerlist='tcp://localhost:5672?connecttimeout='5000'&sasl_mechs='PLAIN'').
> >
> > Plain SASL support is turned off in Java Broker by default. In order
> > to enable it, you need to change your broker configuration file
> > manually and add the following line into authentication provider
> > configuration with name "passwordFile" (as it is the one set on AMQP
> > port):
> >
> > "secureOnlyMechanisms" : [],
> >
>
> As somewhat hinted at by the new config, this is only true when not
> using SSL, and PLAIN is enabled by default if SSL is in use on the
> connection, correct?
>
>
> > Thus, your authentication provider configuration might look like below:
> > {
> >     "id" : "36b029e1-aec0-488e-b8f3-bef6df6b69de",
> >     "name" : "passwordFile",
> >     "path" : "/opt/qpid-java/etc/passwd",
> >     "type" : "PlainPasswordFile",
> >     "secureOnlyMechanisms" : [],
> >     "preferencesproviders" : [ {
> >       "id" : "e34f556a-0bec-4074-829c-7e208d146a88",
> >       "name" : "fileSystemPreferences",
> >       "path" : "/data/user.preferences.json",
> >       "type" : "FileSystemPreferences"
> >     } ]
> > }
> >
> > Restart the broker after that and try to connect again.
> >
> > Kind Regards,
> > Alex
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
> > For additional commands, e-mail: users-help@qpid.apache.org
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
> For additional commands, e-mail: users-help@qpid.apache.org
>
>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message