Mailing-List: contact users-help@qpid.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@qpid.apache.org
Received-SPF: pass (nike.apache.org: domain of fraser.adams@blueyonder.co.uk
 designates 81.103.221.49 as permitted sender)
Message-ID: <4E8F2DD8.9080704@blueyonder.co.uk>
Date: Fri, 07 Oct 2011 17:50:32 +0100
From: Fraser Adams <fraser.adams@blueyonder.co.uk>
User-Agent: Thunderbird 2.0.0.24 (X11/20101027)
MIME-Version: 1.0
To: users@qpid.apache.org
Subject: Re: Is it possible to set authentication to only authenticate
 consumers?
References: 
 <CAECqq8qC+3YdjS3euX+9mVwEpuf5QRWyx3mXE7wZpPr_sbgZTA@mail.gmail.com>
	<4E72452A.50709@blueyonder.co.uk>
	<CAECqq8q47w39PXKi+N_Sxr2ztinhx19+XGWCtKvmhpOCaUgNRQ@mail.gmail.com>
	<4E7308E3.7080804@blueyonder.co.uk>
 <CAECqq8paCiu6E8-zv4Qxsb05XzEYZQDMsO=0O=HVHSyufO1_sw@mail.gmail.com>
 <4E734780.30509@blueyonder.co.uk> <4E737ECC.2020509@redhat.com>
 <4E85EB31.5070602@blueyonder.co.uk> <4E89F3E9.9040601@blueyonder.co.uk>
 <4E8C1A2D.6080902@redhat.com> <4E8EDDF2.2010200@blueyonder.co.uk>
 <4E8EEB44.8030901@redhat.com> <4E8EF79F.8090609@blueyonder.co.uk>
 <4E8F2628.90907@redhat.com>
In-Reply-To: <4E8F2628.90907@redhat.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit


>
> That seems strange to me. For me, if DIGEST-MD5, PLAIN and ANONYMOUS 
> are all available, ANONYMOUS is picked by default unless a username is 
> set. Are you sure you aren't setting a username?
Pretty certain. As I said earlier it's a pretty basic client that has
    string broker = "localhost:5672";
    string connectionOptions = "{reconnect: true}";

When I looked at the broker trace it was talking about fadams@QPID, 
fadams is the name of the account that I'm using to run the client, but 
I've never explicitly used fadams anywhere as a qpid username so 
*something* is picking the account name.

>
> I wonder if your sasl lib behaves differently to mine...
Possibly, I'm running Ubuntu - perhaps it's got some subtly different 
options. I guess it's no big deal now as I seem to have got things 
working generally.

I still think anything to do with security is voodoo magic though, it's 
some sort of miracle that I've made it this far :-D


So now I've got another slightly off the wall question :-) So I've got 
an acl set up whereby I can have anonymous@QPID to only have publish 
rights and named users to subscribe.

What I'd quite like to be able to do is to log, but not deny if a queue 
is created that's not one of a named set. I'm suspecting that I can't do 
that with acl and I might have to write a QMF client to do that.

Incidentally, is it possible to get the broker to re-read an acl. I've 
been restarting the broker, but that's not ideal in a live environment.

Frase


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org