You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Pavel Moravec (JIRA)" <ji...@apache.org> on 2015/04/13 09:29:12 UTC

[jira] [Updated] (QPID-6491) qpid-route map does not use any authentication when querying other brokers

     [ https://issues.apache.org/jira/browse/QPID-6491?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pavel Moravec updated QPID-6491:
--------------------------------
    Attachment: QPID-6491.patch

Proposed patch: for connection to every broker in federation, use the username and password from brokerURL of the 1st broker. I.e. when running:

qpid-route route map guest/guest@mrg7001:7001

guest/guest credentials will be passed.

If running:

qpid-route route map guest/guest@mrg7001:7001 --client-sasl-mechanism=PLAIN

The SASL mechanism will be tried to the all brokers as well.

> qpid-route map does not use any authentication when querying other brokers
> --------------------------------------------------------------------------
>
>                 Key: QPID-6491
>                 URL: https://issues.apache.org/jira/browse/QPID-6491
>             Project: Qpid
>          Issue Type: Bug
>          Components: Python Tools
>    Affects Versions: 0.30
>            Reporter: Pavel Moravec
>            Priority: Minor
>         Attachments: QPID-6491.patch
>
>
> "qpid-route route map" during generating the federation topology connects to each and every broker in the federation to query it's federation peers. All such connections (except for the very first broker) are made as anonymous user only.
> It is requested the tool passes username, password and optionally also --client-sasl-mechanism parameter to all other brokers as well.
> (another option to this would be the tool gets the credentials info from the broker, but currently QMF response to links does not contain such info. This option would need much more code change also on broker side)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org