Qpid
  1. Qpid
  2. QPID-3438

cluster auth failure increments cnx count

    Details

    • Type: Bug Bug
    • Status: Closed
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 0.14
    • Component/s: C++ Broker
    • Labels:
      None

      Description

      If a cluster brokers are authenticating, and an attempted cnx fails due to an auth problem, the broker nevertheless increments its cnx counter. Which means it eventually runs out of available connections – even if there aren't any open.

        Activity

        Hide
        Alan Conway added a comment -
        Show
        Alan Conway added a comment - See review https://reviews.apache.org/r/1591/
        Hide
        michael j. goulish added a comment -

        fixed in svn revision 1215127.

        in case of bad credentials – cluster was holding an auto_ptr to the cnx in its "localConnections" map, thus preventing the unopened cnx from ever being destroyed.

        Show
        michael j. goulish added a comment - fixed in svn revision 1215127. in case of bad credentials – cluster was holding an auto_ptr to the cnx in its "localConnections" map, thus preventing the unopened cnx from ever being destroyed.
        Hide
        michael j. goulish added a comment -

        fixed in revision 1215127.

        in case of bad credentials, cluster code was holding an auto_ptr to the cnx in its local cnx map, thus preventing the broker cnx from ever being destroyed. enough badr-credential login attempts would saturate broker's cnx counter, and prevent further connections – even with good credentials.

        Show
        michael j. goulish added a comment - fixed in revision 1215127. in case of bad credentials, cluster code was holding an auto_ptr to the cnx in its local cnx map, thus preventing the broker cnx from ever being destroyed. enough badr-credential login attempts would saturate broker's cnx counter, and prevent further connections – even with good credentials.
        Hide
        Pavel Moravec added a comment -

        "Fix in Version" is wrong. It is fixed only in 0.16, not in 0.14

        Show
        Pavel Moravec added a comment - "Fix in Version" is wrong. It is fixed only in 0.16, not in 0.14

          People

          • Assignee:
            michael j. goulish
            Reporter:
            michael j. goulish
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development