[QPID-5711] HA cannot promote primary if SASL security is enabled.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.28
• Fix Version/s: 0.30
• Component/s: C++ Clustering
• Assignee: Alan Conway
• Reporter: Alan Conway
• Created: 18/Apr/14 13:30
• Updated: 26/Sep/14 15:42
• Resolved: 12/Jun/14 19:17

Description

Reported on qpid-user list:

Yes, I have the cyrus packages installed on the nodes.

1. rpm -qa | grep cyrus
   cyrus-sasl-plain-2.1.23-13.el6_3.1.x86_64
   cyrus-sasl-lib-2.1.23-13.el6_3.1.x86_64
   cyrus-sasl-md5-2.1.23-13.el6_3.1.x86_64
   cyrus-sasl-gssapi-2.1.23-13.el6_3.1.x86_64
   cyrus-sasl-devel-2.1.23-13.el6_3.1.x86_64
   cyrus-sasl-2.1.23-13.el6_3.1.x86_64

To narrow down, I've simplified the configuration without HA, see below

===configuration===
i) version 0.26 (built from source)

ii) /etc/qpid/qpidd.conf
acl-file=/etc/qpid/qpidd.acl
auth=yes
realm=QPID
no-data-dir=yes
sasl-config=/etc/sasl2/
log-to-stderr=no
log-enable=debug+
log-to-syslog=yes

1. /etc/init.d/qpidd start
   Starting Qpid AMQP daemon: [ OK ]

1. qpid-config queues -a test/test@192.168.10.211:5672 --sasl-mechanism=PLAIN
   Queue Name Attributes
   =================================================================
   5b1b0c2e-bc6f-431b-b955-83ce5680d4ac:0.0 auto-del excl

and things work as expected. However when I enable HA and when the
brokers try to communicate among themselves
I get the following error.

===error===
Promoting qpid daemon to cluster primary: Error in sasl_client_start
(-4) SASL(-4): no mechanism available: No worthy mechs found

See also: https://bugzilla.redhat.com/show_bug.cgi?id=1089353