Mailing-List: contact users-help@qpid.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@qpid.apache.org
MIME-Version: 1.0
Message-ID: <trinity-3a0340dc-f383-4f44-ae0a-e2812587a7e6-1503502408039@3c-app-mailcom-lxa03>
From: "Spud Strumpet" <spud.strumpet@mail.com>
To: users@qpid.apache.org
Subject: Qpid C++ Broker 1.36 Max Connections Per User Option not working
Content-Type: text/plain; charset=UTF-8
Date: Wed, 23 Aug 2017 17:33:28 +0200
Importance: normal
Sensitivity: Normal
Content-Transfer-Encoding: quoted-printable
archived-at: Wed, 23 Aug 2017 15:33:34 -0000

Hi,

I have been trying to configure the maximum connections per user but none =
of the options seem to be having an affect=2E
I have tried various combinations of setting:

   * --connection-limit-per-user N on the command line, and
   * quota connections N username in the acl file

In the broker trace log, it confirms that the connection limit is enabled,=
 but all connections then succeed anyway=2E None are rejected=2E

I have tried setting max connections to zero in both places for all users,=
 but still I can connect=2E

Is anyone able to confirm that the max connections options are working as =
expected in the C++ 1=2E36 Broker?

Here is the log output for debug+:Security:

C:\Users\Bob\Desktop\qpid_broker_cpp>C:\qpid-cpp\bin\qpidd=2Eexe --data-di=
r C:\qpid_data_dir --auth yes --acl-file aclfile=2Eacl --log-enable debug+:=
Security
2017-08-23 16:12:13 [Security] notice ACL: Read file "C:\qpid_data_dir\acl=
file=2Eacl"
2017-08-23 16:12:13 [Security] debug ACL: Group list: 0 groups found:
2017-08-23 16:12:13 [Security] debug ACL: name list: 2 names found:
2017-08-23 16:12:13 [Security] debug ACL: =C2=A0* bob
2017-08-23 16:12:13 [Security] debug ACL: Rule list: 6 ACL rules found:
2017-08-23 16:12:13 [Security] debug ACL: =C2=A0 =C2=A01 allow [bob] creat=
e *
2017-08-23 16:12:13 [Security] debug ACL: =C2=A0 =C2=A02 allow [bob] bind =
*
2017-08-23 16:12:13 [Security] debug ACL: =C2=A0 =C2=A03 allow [bob] consu=
me *
2017-08-23 16:12:13 [Security] debug ACL: =C2=A0 =C2=A04 allow [bob] publi=
sh *
2017-08-23 16:12:13 [Security] debug ACL: =C2=A0 =C2=A05 allow [bob] acces=
s *
2017-08-23 16:12:13 [Security] debug ACL: =C2=A0 =C2=A06 deny [*] *
2017-08-23 16:12:13 [Security] debug ACL: connections quota: 1 rules found=
:
2017-08-23 16:12:13 [Security] debug ACL: quota 1 : 0 connections for bob
2017-08-23 16:12:13 [Security] debug ACL: queues quota: 0 rules found:
2017-08-23 16:12:13 [Security] debug ACL: Load Rules
2017-08-23 16:12:13 [Security] debug ACL: Processing =C2=A06 deny [*] *
2017-08-23 16:12:13 [Security] debug ACL: FoundMode deny
2017-08-23 16:12:13 [Security] debug ACL: Processing =C2=A05 allow [bob] a=
ccess *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {access} to objec=
ts {broker,connection,exchange,link,method,query,queue} with props { } for =
users {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing =C2=A04 allow [bob] p=
ublish *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {publish} to obje=
cts {broker,connection,exchange,link,method,query,queue} with props { } for=
 users {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing =C2=A03 allow [bob] c=
onsume *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {consume} to obje=
cts {broker,connection,exchange,link,method,query,queue} with props { } for=
 users {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing =C2=A02 allow [bob] b=
ind *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {bind} to objects=
 {broker,connection,exchange,link,method,query,queue} with props { } for us=
ers {bob}
2017-08-23 16:12:13 [Security] debug ACL: Processing =C2=A01 allow [bob] c=
reate *
2017-08-23 16:12:13 [Security] debug ACL: Adding actions {create} to objec=
ts {broker,connection,exchange,link,method,query,queue} with props { } for =
users {bob}
2017-08-23 16:12:13 [Security] debug ACL: global Connection Rule list : 0 =
rules found :
2017-08-23 16:12:13 [Security] debug ACL: User Connection Rule lists : 0 u=
ser lists found :
2017-08-23 16:12:13 [Security] debug ACL: Transfer ACL is Enabled!
2017-08-23 16:12:13 [Security] debug ACL: Connection quotas are Enabled=2E
2017-08-23 16:12:13 [Security] debug ACL: Default connection mode : allow
2017-08-23 16:12:13 [Security] info ACL Plugin loaded

Many thanks in advance,

Spud=2E

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@qpid.apache.org
For additional commands, e-mail: users-help@qpid.apache.org