From users-return-21771-archive-asf-public=cust-asf.ponee.io@qpid.apache.org Tue Dec 29 19:32:48 2020 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mxout1-he-de.apache.org (mxout1-he-de.apache.org [95.216.194.37]) by mx-eu-01.ponee.io (Postfix) with ESMTPS id 9672C180626 for ; Tue, 29 Dec 2020 20:32:48 +0100 (CET) Received: from mail.apache.org (mailroute1-lw-us.apache.org [207.244.88.153]) by mxout1-he-de.apache.org (ASF Mail Server at mxout1-he-de.apache.org) with SMTP id 9AC4F66237 for ; Tue, 29 Dec 2020 19:32:47 +0000 (UTC) Received: (qmail 13918 invoked by uid 500); 29 Dec 2020 19:32:46 -0000 Mailing-List: contact users-help@qpid.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@qpid.apache.org Delivered-To: mailing list users@qpid.apache.org Received: (qmail 13905 invoked by uid 99); 29 Dec 2020 19:32:45 -0000 Received: from spamproc1-he-de.apache.org (HELO spamproc1-he-de.apache.org) (116.203.196.100) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 29 Dec 2020 19:32:45 +0000 Received: from localhost (localhost [127.0.0.1]) by spamproc1-he-de.apache.org (ASF Mail Server at spamproc1-he-de.apache.org) with ESMTP id 034F21FF3A1 for ; Tue, 29 Dec 2020 19:32:45 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamproc1-he-de.apache.org X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=0 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.2, NUMERIC_HTTP_ADDR=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, WEIRD_PORT=0.001] autolearn=disabled Authentication-Results: spamproc1-he-de.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-ec2-va.apache.org ([116.203.227.195]) by localhost (spamproc1-he-de.apache.org [116.203.196.100]) (amavisd-new, port 10024) with ESMTP id evS0tCo-QwVJ for ; Tue, 29 Dec 2020 19:32:44 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=209.85.160.172; helo=mail-qt1-f172.google.com; envelope-from=orudyy@gmail.com; receiver= Received: from mail-qt1-f172.google.com (mail-qt1-f172.google.com [209.85.160.172]) by mx1-ec2-va.apache.org (ASF Mail Server at mx1-ec2-va.apache.org) with ESMTPS id ADE20BCCEF for ; Tue, 29 Dec 2020 19:32:43 +0000 (UTC) Received: by mail-qt1-f172.google.com with SMTP id h19so9580002qtq.13 for ; Tue, 29 Dec 2020 11:32:43 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=WqI3K6hmeaERm/7USOcLPkpxV3nBR/lTTQkG5hTsKao=; b=aKdop2jV/iM8xwrAmhCm5bC7+841VWHuMPA7j9B/XXyJ9DzOpHD6tzUX3V/+oul4Oo Hpw9nHHPYUWNqWdP/grIN792Z7eL5C3HGqAGPsgnIjtfpK37xOFN0qOCcnrz6R+iplKn 6eRnx2XrXutco1R2UF3fWv9Jgo8YNaCOv9DM3pprX55/i0//kiY59y61DlN1U9EIMT3U HjJZHPcIX0Z3h4AVL4cV9LnId3dJmGXyy8eJOfcACiCKXQsD1iGTfVRPWKHYPt2USsnE IiYAcsSDu3mnAFyNQxEwP89OpKFc8y54ZcB6xQjVv/CGOsdQcM/sL7ODokXVrkFQDWfG uhuw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=WqI3K6hmeaERm/7USOcLPkpxV3nBR/lTTQkG5hTsKao=; b=MNxQ6+lpxArn8/c/nkJJQz0VqZUk73ImHELqx2/aAruGu41e46kHi8bKcMn+raXtCp 6mm2+0AD5NjqTvD942UUaGq39E9ATFqgoYQeFffqngOJ8DkBr3WKWq8VNl9MTj6uOPyI GtkF5NKETK9DYWoLoYwhCDJ6e3vTUNofu6oj++m42LarFfodZJA5QiprXjLRUevOxUAr 4ES86r2dfDoyOLOWM+5cMW/eqkZzBvwLMeFc32UNZbyYdZJ4hD5OY5qp9I35mhIkyTC1 zHU1oxu8msjBor6Da6bAhWCqKCTjjNoflEf6YtjK5i5DYOpxXC1VbdACo7lBTqN9Tco8 BXWA== X-Gm-Message-State: AOAM533GuvwGcvBLv2WLeBB8XHyH65L9g8kN8tXreOR0F/Nz5SVm/xxo IWN3luICCUMJzrEpbTn24hdJDiLRiRPNksCyjTbRlze/ylXk5huV X-Google-Smtp-Source: ABdhPJz/p7e3jhnDFoNRVjbKonj6TjIYHcT8tmH9M6gt5zlbR0T0hT9JhoknqymtD5Ftj5KhchUjfQcfgkEdiaoZTdM= X-Received: by 2002:ac8:6659:: with SMTP id j25mr50730833qtp.322.1609270363144; Tue, 29 Dec 2020 11:32:43 -0800 (PST) MIME-Version: 1.0 From: Oleksandr Rudyy Date: Tue, 29 Dec 2020 19:32:32 +0000 Message-ID: Subject: Does Qpid cpp client support authentication with XOAUTH2 SASL mechanism ? To: users@qpid.apache.org Content-Type: multipart/alternative; boundary="00000000000057c4da05b79f746a" --00000000000057c4da05b79f746a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi folks, I tried to authenticate a qpid-cpp client using XOAUTH2 SASL mechanism agains Qpid Broker-J but it did not work for me. I assumed that cyrus-sasl-xoauth2 ( https://github.com/moriyoshi/cyrus-sasl-xoauth2.git) might work with qpid-cpp client as its SASL layer is built on top of cyrus-sals. Thus, I built cyrus-sasl-xoauth2 from sources and installed it on my fedora 33 into /usr/lib/sasl2. I tried to run client example hello_world using export QPID_SSL_CERT_DB=3Dsql:./nssdb export LD_LIBRARY_PATH=3D/usr/lib/sasl2:. export QPID_LOG_ENABLE=3D"trace+" ./examples/messaging/hello_world localhost:5671 'test;{create:always}' '{username:,password:,transport:ssl}' In the above, i specified my id and access token under and respectively. An authentication had failed for me with the following trace logs: 2020-12-29 19:24:45 [Security] debug SslConnector created for 0-10 2020-12-29 19:24:45 [System] info Connecting: 192.168.1.102:5671 2020-12-29 19:24:45 [Client] debug RECV [[192.168.1.102:desktop:5671]]: INIT(0-10) 2020-12-29 19:24:45 [Security] trace RECV [[192.168.1.102:desktop:5671]]: Frame[BEbe; channel=3D0; {ConnectionStartBody: server-properties=3D{product:V2:7:str16(unknown),qpid.build:V2:7:str16(unkn= own),qpid.features:[{V2:17:str16(qpid.jms-selector)}]list([{V2:17:str16(qpi= d.jms-selector)}]),qpid.federation_tag:V2:36:str16(d00c463d-05b4-4f9b-9926-= 03229b53c8b9),qpid.instance_name:V2:6:str16(Broker),qpid.message_compressio= n_supported:V2:4:str16(true),qpid.queue_lifetime_supported:V2:4:str16(true)= ,qpid.virtualhost_properties_supported:V2:4:str16(true),version:V2:14:str16= (9.0.0-SNAPSHOT)}; mechanisms=3Dstr16{V2:7:str16(XOAUTH2)}; locales=3Dstr16{V2:5:str16(en_US)}= ; }] 2020-12-29 19:24:45 [Security] debug CyrusSasl::start(XOAUTH2) 2020-12-29 19:24:45 [Security] debug external SSF detected and set to 128 2020-12-29 19:24:45 [Security] debug min_ssf: 0, max_ssf: 256 2020-12-29 19:24:45 [System] debug Exception constructed: Can't authenticate using XOAUTH2 2020-12-29 19:24:45 [Client] warning Closing connection due to Can't authenticate using XOAUTH2 2020-12-29 19:24:45 [Security] trace SENT [[192.168.1.102:desktop:5671]]: Frame[BEbe; channel=3D0; {ConnectionCloseBody: reply-code=3D501; reply-text=3DCan't authenticate using XOAUTH2; }] 2020-12-29 19:24:45 [Security] trace RECV [[192.168.1.102:desktop:5671]]: Frame[BEbe; channel=3D0; {ConnectionCloseOkBody: }] 2020-12-29 19:24:45 [System] debug Exception constructed: Can't authenticate using XOAUTH2 It seems that XOAUTH2 SASL authentication might not be supported, unless I am doing something wrong... Is there any way to make XOAUTH2 authentication working with a qpid-cpp client? Kind Regards, Alex --00000000000057c4da05b79f746a--