You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Andrew Kennedy (JIRA)" <qp...@incubator.apache.org> on 2010/05/12 14:56:42 UTC

[jira] Commented: (QPID-2600) ACL policy doesn't permit certain characters in usernames added to groups

    [ https://issues.apache.org/jira/browse/QPID-2600?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12866556#action_12866556 ] 

Andrew Kennedy commented on QPID-2600:
--------------------------------------

I have also based the Java group entity parsing on the C++ parser and the website documentation.

Should this be changed, with the @ and / swapped, to:

<name> [ /<domain> [ @<realm> ] ]



> ACL policy doesn't permit certain characters in usernames added to groups
> -------------------------------------------------------------------------
>
>                 Key: QPID-2600
>                 URL: https://issues.apache.org/jira/browse/QPID-2600
>             Project: Qpid
>          Issue Type: Bug
>          Components: C++ Broker
>    Affects Versions: 0.6
>            Reporter: Rajith Attapattu
>            Assignee: Rajith Attapattu
>            Priority: Minor
>             Fix For: 0.7
>
>
> Description of problem:
> Unable to add a host principle to a group, the acl policy file fails to load and prevents qpidd from running.
> I guess this is partly due to us not figuring out what is exactly allowed for group and usernames.
> How reproducible:
> Fails every time.
> Steps to Reproduce:
> 1. Add a host or service principle to a group in the acl file. Something like
> this will suffice:
>   group somegroup host/somemachine.example.com@EXAMPLE.COM
> Actual results:
> Failure to start. Error message is:
> Daemon startup failed: Could not read ACL file ACL format error:
> /etc/qpid/policy.acl:25: Name "host/somemachine.example.com@EXAMPLE.COM"
> contains illegal characters.
> Expected results:
> Should load and parse the group cleanly.    

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org