You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Gordon Sim (JIRA)" <qp...@incubator.apache.org> on 2009/12/17 12:48:18 UTC
[jira] Created: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
---------------------------------------------------------------------------------------------------------------------
Key: QPID-2290
URL: https://issues.apache.org/jira/browse/QPID-2290
Project: Qpid
Issue Type: Bug
Components: C++ Broker
Reporter: Gordon Sim
Priority: Blocker
Email from prattrs@adobe.com on user list states:
> when I enable auth=yes, I get the following:
>
> 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> red as prattrs (qpid/broker/SemanticState.cpp:435)
I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
[jira] Commented: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Posted by "Sandy Pratt (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12792149#action_12792149 ]
Sandy Pratt commented on QPID-2290:
-----------------------------------
I was able to work around this issue by changing line 57 of org.apache.qpid.client.BasicMessageProducer_0_10 as follows:
userIDBytes = Strings.toUTF8(_userID + "@QPID");
from
userIDBytes = Strings.toUTF8(_userID);
My auth-realm on the server is the default (QPID).
> Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
> ---------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-2290
> URL: https://issues.apache.org/jira/browse/QPID-2290
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.6
> Reporter: Gordon Sim
> Assignee: Rajith Attapattu
> Priority: Blocker
> Fix For: 0.6
>
>
> Email from prattrs@adobe.com on user list states:
> > when I enable auth=yes, I get the following:
> >
> > 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> > red as prattrs (qpid/broker/SemanticState.cpp:435)
> I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
[jira] Updated: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Posted by "Rajith Attapattu (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rajith Attapattu updated QPID-2290:
-----------------------------------
Attachment: QPID-2290.patch
The commit made at rev 892123 on Qpid trunk has a few concerns about the use of append, as it's a relatively expensive operation as it results in several memory allocations.
The attached patch uses a slightly different approach.
If the userID != id supplied in the message it will then compare the userName against the id supplied in the message provided the user is from the default domain.
Will commit this as soon as the trunk is reopened or a branch created.
> Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
> ---------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-2290
> URL: https://issues.apache.org/jira/browse/QPID-2290
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.6
> Reporter: Gordon Sim
> Assignee: Rajith Attapattu
> Priority: Blocker
> Fix For: 0.6
>
> Attachments: QPID-2290.patch
>
>
> Email from prattrs@adobe.com on user list states:
> > when I enable auth=yes, I get the following:
> >
> > 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> > red as prattrs (qpid/broker/SemanticState.cpp:435)
> I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
[jira] Assigned: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Posted by "Andrew Stitcher (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Stitcher reassigned QPID-2290:
-------------------------------------
Assignee: Ted Ross
Could you look at this and form an opinion whther the fix for QPID-2129 is the underlying cause.
As we are in release mode the sooner the better!
> Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
> ---------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-2290
> URL: https://issues.apache.org/jira/browse/QPID-2290
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.6
> Reporter: Gordon Sim
> Assignee: Ted Ross
> Priority: Blocker
> Fix For: 0.6
>
>
> Email from prattrs@adobe.com on user list states:
> > when I enable auth=yes, I get the following:
> >
> > 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> > red as prattrs (qpid/broker/SemanticState.cpp:435)
> I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
[jira] Updated: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Posted by "Andrew Stitcher (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Andrew Stitcher updated QPID-2290:
----------------------------------
Affects Version/s: 0.6
Fix Version/s: 0.6
> Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
> ---------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-2290
> URL: https://issues.apache.org/jira/browse/QPID-2290
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.6
> Reporter: Gordon Sim
> Priority: Blocker
> Fix For: 0.6
>
>
> Email from prattrs@adobe.com on user list states:
> > when I enable auth=yes, I get the following:
> >
> > 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> > red as prattrs (qpid/broker/SemanticState.cpp:435)
> I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
[jira] Resolved: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Posted by "Rajith Attapattu (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rajith Attapattu resolved QPID-2290.
------------------------------------
Resolution: Fixed
I added a fix for this where the broker now uses the default realm as the domain if the userID supplied in the message doesn't contain a domain.
This is added at rev 892123 in Qpid trunk.
> Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
> ---------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-2290
> URL: https://issues.apache.org/jira/browse/QPID-2290
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.6
> Reporter: Gordon Sim
> Assignee: Rajith Attapattu
> Priority: Blocker
> Fix For: 0.6
>
>
> Email from prattrs@adobe.com on user list states:
> > when I enable auth=yes, I get the following:
> >
> > 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> > red as prattrs (qpid/broker/SemanticState.cpp:435)
> I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
[jira] Assigned: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Posted by "Rajith Attapattu (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Rajith Attapattu reassigned QPID-2290:
--------------------------------------
Assignee: Rajith Attapattu (was: Ted Ross)
> Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
> ---------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-2290
> URL: https://issues.apache.org/jira/browse/QPID-2290
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.6
> Reporter: Gordon Sim
> Assignee: Rajith Attapattu
> Priority: Blocker
> Fix For: 0.6
>
>
> Email from prattrs@adobe.com on user list states:
> > when I enable auth=yes, I get the following:
> >
> > 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> > red as prattrs (qpid/broker/SemanticState.cpp:435)
> I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org
[jira] Commented: (QPID-2290) Unauthorised-access exception raised
when sending message from JMS on connection authenticated using PLAIN
mechanism
Posted by "Rajith Attapattu (JIRA)" <qp...@incubator.apache.org>.
[ https://issues.apache.org/jira/browse/QPID-2290?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12792323#action_12792323 ]
Rajith Attapattu commented on QPID-2290:
----------------------------------------
Sandy we can't modify the JMS client to add a domain to the userID as it will cause problems when the client is used against the java broker.
The Java broker does not have any notion of a domain associated with a userID.
Anyways I believe the proper fix is for the c++ broker to use the default realm as the domain when authenticating a message that has a userID with a domain.
> Unauthorised-access exception raised when sending message from JMS on connection authenticated using PLAIN mechanism
> ---------------------------------------------------------------------------------------------------------------------
>
> Key: QPID-2290
> URL: https://issues.apache.org/jira/browse/QPID-2290
> Project: Qpid
> Issue Type: Bug
> Components: C++ Broker
> Affects Versions: 0.6
> Reporter: Gordon Sim
> Assignee: Rajith Attapattu
> Priority: Blocker
> Fix For: 0.6
>
>
> Email from prattrs@adobe.com on user list states:
> > when I enable auth=yes, I get the following:
> >
> > 2009-12-16 18:33:18 error qpid/amqp_0_10/SessionHandler.cpp:97: Execution exception: unauthorized-access: authorised user id : prattrs@QPID but user id in message decla
> > red as prattrs (qpid/broker/SemanticState.cpp:435)
> I believe this is a result of the change brought in by r819819 to address QPID-2129.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org