You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@rocketmq.apache.org by GitBox <gi...@apache.org> on 2023/02/24 01:41:34 UTC

[GitHub] [rocketmq] Oliverwqcwrw created a discussion: Whether a retry is necessary if there is an ACL verification failure

GitHub user Oliverwqcwrw created a discussion: Whether a retry is necessary if there is an ACL verification failure

> 
            org.apache.rocketmq.client.exception.MQClientException: Send [3] times, still failed, cost [798]ms, Topic: TopicTest, 
    BrokersSent: [broker-a, broker-a, broker-a]
        See https://rocketmq.apache.org/docs/bestPractice/06FAQ for further details.
	        at org.apache.rocketmq.client.impl.producer.DefaultMQProducerImpl.sendDefaultImpl(DefaultMQProducerImpl.java:706)
	        at org.apache.rocketmq.client.impl.producer.DefaultMQProducerImpl.send(DefaultMQProducerImpl.java:1407)
	        at org.apache.rocketmq.client.impl.producer.DefaultMQProducerImpl.send(DefaultMQProducerImpl.java:1349)
	        at org.apache.rocketmq.client.producer.DefaultMQProducer.send(DefaultMQProducer.java:351)
	        at org.apache.rocketmq.example.simple.AclClient.producer(AclClient.java:71)
	        at org.apache.rocketmq.example.simple.AclClient.main(AclClient.java:54)
        Caused by: org.apache.rocketmq.client.exception.MQBrokerException: CODE: 1  DESC: 
    org.apache.rocketmq.acl.common.AclException: Check signature failed for accessKey=RocketMQ, 
    org.apache.rocketmq.acl.plain.PlainPermissionManager.validate(PlainPermissionManager.java:634) BROKER: 127.0.0.1:10909
        For more information, please visit the url, https://rocketmq.apache.org/docs/bestPractice/06FAQ
	        at org.apache.rocketmq.client.impl.MQClientAPIImpl.processSendResponse(MQClientAPIImpl.java:779)
	        at org.apache.rocketmq.client.impl.MQClientAPIImpl.sendMessageSync(MQClientAPIImpl.java:619)
	        at org.apache.rocketmq.client.impl.MQClientAPIImpl.sendMessage(MQClientAPIImpl.java:601)
	        at org.apache.rocketmq.client.impl.MQClientAPIImpl.sendMessage(MQClientAPIImpl.java:545)
	        at org.apache.rocketmq.client.impl.producer.DefaultMQProducerImpl.sendKernelImpl(DefaultMQProducerImpl.java:899)
	        at org.apache.rocketmq.client.impl.producer.DefaultMQProducerImpl.sendDefaultImpl(DefaultMQProducerImpl.java:642)
	        ... 5 more

GitHub link: https://github.com/apache/rocketmq/discussions/6168

----
This is an automatically sent email for dev@rocketmq.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@rocketmq.apache.org

[GitHub] [rocketmq] drpmma added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

Posted by GitBox <gi...@apache.org>.

GitHub user drpmma added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

A new response code is required to denote the unsuccessful authentication.

GitHub link: https://github.com/apache/rocketmq/discussions/6168#discussioncomment-5097988

----
This is an automatically sent email for dev@rocketmq.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@rocketmq.apache.org

[GitHub] [rocketmq] ShadowySpirits added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

Posted by GitBox <gi...@apache.org>.

GitHub user ShadowySpirits added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

When the request can not pass validation, it seems like returning a broker exception to the client.

https://github.com/apache/rocketmq/blob/7cfffe7f48e1db9e9db3641e8ba6aed3e465281c/proxy/src/main/java/org/apache/rocketmq/proxy/grpc/interceptor/AuthenticationInterceptor.java#L67-L71

@drpmma Please take a look.

GitHub link: https://github.com/apache/rocketmq/discussions/6168#discussioncomment-5096088

----
This is an automatically sent email for dev@rocketmq.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@rocketmq.apache.org

[GitHub] [rocketmq] xdkxlk added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

Posted by GitBox <gi...@apache.org>.

GitHub user xdkxlk added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

The AuthenticationInterceptor is only used by Grpc client

GitHub link: https://github.com/apache/rocketmq/discussions/6168#discussioncomment-5097880

----
This is an automatically sent email for dev@rocketmq.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@rocketmq.apache.org

[GitHub] [rocketmq] Oliverwqcwrw added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

Posted by GitBox <gi...@apache.org>.

GitHub user Oliverwqcwrw added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

I will polish it

GitHub link: https://github.com/apache/rocketmq/discussions/6168#discussioncomment-5098313

----
This is an automatically sent email for dev@rocketmq.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@rocketmq.apache.org

[GitHub] [rocketmq] xdkxlk added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

Posted by GitBox <gi...@apache.org>.

GitHub user xdkxlk added a comment to the discussion: Whether a retry is necessary if there is an ACL verification failure

It is unnecessary in my opinion

GitHub link: https://github.com/apache/rocketmq/discussions/6168#discussioncomment-5097895

----
This is an automatically sent email for dev@rocketmq.apache.org.
To unsubscribe, please send an email to: dev-unsubscribe@rocketmq.apache.org