[QPID-2129] GSSAPI auth. with broker issue

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Won't Fix
• Fix Version/s: JIRA Cleanup
• Component/s: C++ Broker

Environment

SVN rev. 819819 on Fedora 11.

• Assignee: Ted Ross
• Reporter: Arjun Roy
• Created: 02/Oct/09 18:09
• Updated: 06/Sep/16 12:45
• Resolved: 24/Apr/13 13:18

Description

Using qpidd with ovirt. Ovirt uses kerberos/gssapi for authentication.

The following is a description of what happens when a ruby console tries to connect:

Connecting to amqp://srv.ovirt-demo.com:5672
Console Connection Established...
2009-10-01 20:35:10 warning Exception received from broker: unauthorized-access: unauthorized-access: authorised user id : qpidd/srv.ovirt-demo.com@QPID but user id in message declared as qpidd/[e-mail] (qpid/broker/SemanticState.cpp:385) [caused by 11 \x00:\x00]
2009-10-01 20:35:10 error Session Exception during message-transfer: unauthorized-access: unauthorized-access: authorised user id : qpidd/srv.ovirt-demo.com@QPID but user id in message declared as qpidd/[e-mail] (qpid/broker/SemanticState.cpp:385)
terminate called after throwing an instance of 'qpid::framing::UnauthorizedAccessException'
what(): unauthorized-access: unauthorized-access: authorised user id : qpidd/srv.ovirt-demo.com@QPID but user id in message declared as qpidd/[e-mail] (qpid/broker/SemanticState.cpp:385)
Aborted

Expected behavior: qpidd should use principal qpidd/[e-mail] instead of qpidd/srv.ovirt-demo.com@QPID.