You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Chuck Rolke (Jira)" <ji...@apache.org> on 2019/09/09 19:12:00 UTC

[jira] [Commented] (DISPATCH-1414) Include source/target address in the policy DENY info messages

    [ https://issues.apache.org/jira/browse/DISPATCH-1414?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16926013#comment-16926013 ] 

Chuck Rolke commented on DISPATCH-1414:
---------------------------------------

In the log entry the 'xxxx' field is the name of the requested source or target.

Attached find a text file that shows two trace snippets. Each has the proton trace of the attach frame and policy log of the denial. There you can correlate the name requested by the attach and the policy message showing the name when the request was denied.

> Include source/target address in the policy DENY info messages
> --------------------------------------------------------------
>
>                 Key: DISPATCH-1414
>                 URL: https://issues.apache.org/jira/browse/DISPATCH-1414
>             Project: Qpid Dispatch
>          Issue Type: Improvement
>            Reporter: Keith Wall
>            Priority: Major
>
> The policy DENY info message currently omits the source/target address.  This impedes the diagnosis of policy misconfigurations.  Currently the message looks like this:
> {{POLICY (info) [1228]: DENY AMQP Attach sender link 'xxxx' for user 'uuuuu', rhost '10.128.6.1', vhost 'vvvvvv' based on link target name}}



--
This message was sent by Atlassian Jira
(v8.3.2#803003)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org