qpid-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Spud Strumpet" <spud.strum...@mail.com>
Subject Qpid C++ Broker 1.36 Max Connections Per User Option not working
Date Wed, 23 Aug 2017 15:33:28 GMT
Hi,

I have been trying to configure the maximum connections per user but none of the options seem
to be having an affect.
I have tried various combinations of setting:

   * --connection-limit-per-user N on the command line, and
   * quota connections N username in the acl file

In the broker trace log, it confirms that the connection limit is enabled, but all connections
then succeed anyway. None are rejected.

I have tried setting max connections to zero in both places for all users, but still I can
connect.

Is anyone able to confirm that the max connections options are working as expected in the
C++ 1.36 Broker?

Here is the log output for debug+:Security:

C:\Users\Bob\Desktop\qpid_broker_cpp>C:\qpid-cpp\bin\qpidd.exe --data-dir C:\qpid_data_dir
--auth yes --acl-file aclfile.acl --log-enable debug+:Security
2017-08-23 16:12:13 [Security] notice ACL: Read file "C:\qpid_data_dir\aclfile.acl"
2017-08-23 16:12:13 [Security] debug ACL: Group list: 0 groups found:
2017-08-23 16:12:13 [Security] debug ACL: name list: 2 names found:
2017-08-23 16:12:13 [Security] debug ACL:  * bob
2017-08-23 16:12:13 [Security] debug ACL: Rule list: 6 ACL rules found:
2017-08-23 16:12:13 [Security] debug ACL:    1 allow [bob] create *
2017-08-23 16:12:13 [Security] debug ACL:    2 allow [bob] bind *
2017-08-23 16:12:13 [Security] debug ACL:    3 allow [bob] consume *
2017-08-23 16:12:13 [Security] debug ACL:    4 allow [bob] publish *
2017-08-23 16:12:13 [Security] debug ACL:    5 allow [bob] access *
2017-08-23 16:12:13 [Security] debug ACL:    6 deny [*] *
2017-08-23 16:12:13 [Security] debug ACL: connections quota: 1 rules found:
2017-08-23 16:12:13 [Security] debug ACL: quota 1 : 0 connections for bob
2017-08-23 16:12:13 [Security] debug ACL: queues quota: 0 rules found:
2017-08-23 16:12:13 [Security] debug ACL: Load Rules
2017-08-23 16:12:13 [Security] debug ACL: Processing  6 deny [*] *
2017-08-23 16:12:13 [Security] debug ACL: FoundMode deny
2017-08-23 16:12:13 [Security] debug ACL: Processing  5 allow [bob] access *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {access} to objects {broker,connection,exchange,link,method,query,queue}
with props { } for users {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing  4 allow [bob] publish *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {publish} to objects {broker,connection,exchange,link,method,query,queue}
with props { } for users {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing  3 allow [bob] consume *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {consume} to objects {broker,connection,exchange,link,method,query,queue}
with props { } for users {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing  2 allow [bob] bind *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {bind} to objects {broker,connection,exchange,link,method,query,queue}
with props { } for users {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing  1 allow [bob] create *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {create} to objects {broker,connection,exchange,link,method,query,queue}
with props { } for users {bob}
2017-08-23 16:12:13 [Security] debug ACL: global Connection Rule list : 0 rules found :
2017-08-23 16:12:13 [Security] debug ACL: User Connection Rule lists : 0 user lists found
:
2017-08-23 16:12:13 [Security] debug ACL: Transfer ACL is Enabled!
2017-08-23 16:12:13 [Security] debug ACL: Connection quotas are Enabled.
2017-08-23 16:12:13 [Security] debug ACL: Default connection mode : allow
2017-08-23 16:12:13 [Security] info ACL Plugin loaded

Many thanks in advance,

Spud.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
For additional commands, e-mail: users-help@qpid.apache.org


Mime
View raw message