[QPID-4032] Broker does not accept sub-groups in group declaration, contrary to wiki documentation

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.14, 0.16
• Fix Version/s: 0.17
• Component/s: C++ Broker
• Labels: ACL

Environment

Linux 2.6.32-5-amd64 #1 SMP Thu Mar 22 17:26:33 UTC 2012 x86_64 GNU/Linux
gcc (Debian 4.4.5-8) 4.4.5

• Assignee: Charles E. Rolke
• Reporter: Paul Colby
• Created: 30/May/12 22:46
• Updated: 29/Jul/13 18:53
• Resolved: 19/Jun/12 14:14

Description

The ACL wiki page (https://cwiki.apache.org/qpid/acl.html) indicates by at least two examples, that group declarations can contain sub-groups. However, Qpid 0.16 does not (seem to) allow this.

For example, given the following ACL file (cut down from the example at https://cwiki.apache.org/qpid/acl.html#ACL-Examplefile%253A):

# Some groups
group user-consume martin@QPID ted@QPID
group group2 kim@QPID user-consume rob@QPID

Qpid 0.16 gives the following error:

ACL format error: /home/paul/.qpidd/qpidd.acl:3: Line : 3, Username 'user-consume' must contain a realm

It appears that the broker is requiring user-consume to be a qualified user name such as user-consume@QPID and not realizing that it is a group name instead.