You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Rajith Attapattu (JIRA)" <qp...@incubator.apache.org> on 2010/06/07 23:54:11 UTC

[jira] Resolved: (QPID-2600) ACL policy doesn't permit certain characters in usernames added to groups

     [ https://issues.apache.org/jira/browse/QPID-2600?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rajith Attapattu resolved QPID-2600.
------------------------------------

    Resolution: Fixed

The c++ acl module now allows all characters as specified in the acl proposal here http://qpid.apache.org/acl.html
I have also added a test case to cover the issue highlighted in the JIRA.

> ACL policy doesn't permit certain characters in usernames added to groups
> -------------------------------------------------------------------------
>
>                 Key: QPID-2600
>                 URL: https://issues.apache.org/jira/browse/QPID-2600
>             Project: Qpid
>          Issue Type: Bug
>          Components: C++ Broker
>    Affects Versions: 0.6
>            Reporter: Rajith Attapattu
>            Assignee: Rajith Attapattu
>            Priority: Minor
>             Fix For: 0.7
>
>
> Description of problem:
> Unable to add a host principle to a group, the acl policy file fails to load and prevents qpidd from running.
> I guess this is partly due to us not figuring out what is exactly allowed for group and usernames.
> How reproducible:
> Fails every time.
> Steps to Reproduce:
> 1. Add a host or service principle to a group in the acl file. Something like
> this will suffice:
>   group somegroup host/somemachine.example.com@EXAMPLE.COM
> Actual results:
> Failure to start. Error message is:
> Daemon startup failed: Could not read ACL file ACL format error:
> /etc/qpid/policy.acl:25: Name "host/somemachine.example.com@EXAMPLE.COM"
> contains illegal characters.
> Expected results:
> Should load and parse the group cleanly.    

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org