Uploaded image for project: 'Qpid'
  1. Qpid
  2. QPID-5711

HA cannot promote primary if SASL security is enabled.

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.28
    • Fix Version/s: 0.30
    • Component/s: C++ Clustering
    • Labels:
      None

      Description

      Reported on qpid-user list:

      Yes, I have the cyrus packages installed on the nodes.

      1. rpm -qa | grep cyrus
        cyrus-sasl-plain-2.1.23-13.el6_3.1.x86_64
        cyrus-sasl-lib-2.1.23-13.el6_3.1.x86_64
        cyrus-sasl-md5-2.1.23-13.el6_3.1.x86_64
        cyrus-sasl-gssapi-2.1.23-13.el6_3.1.x86_64
        cyrus-sasl-devel-2.1.23-13.el6_3.1.x86_64
        cyrus-sasl-2.1.23-13.el6_3.1.x86_64

      To narrow down, I've simplified the configuration without HA, see below

      ===configuration===
      i) version 0.26 (built from source)

      ii) /etc/qpid/qpidd.conf
      acl-file=/etc/qpid/qpidd.acl
      auth=yes
      realm=QPID
      no-data-dir=yes
      sasl-config=/etc/sasl2/
      log-to-stderr=no
      log-enable=debug+
      log-to-syslog=yes

      1. /etc/init.d/qpidd start
        Starting Qpid AMQP daemon: [ OK ]
      1. qpid-config queues -a test/test@192.168.10.211:5672 --sasl-mechanism=PLAIN
        Queue Name Attributes
        =================================================================
        5b1b0c2e-bc6f-431b-b955-83ce5680d4ac:0.0 auto-del excl

      and things work as expected. However when I enable HA and when the
      brokers try to communicate among themselves
      I get the following error.

      ===error===
      Promoting qpid daemon to cluster primary: Error in sasl_client_start
      (-4) SASL(-4): no mechanism available: No worthy mechs found

      See also: https://bugzilla.redhat.com/show_bug.cgi?id=1089353

        Attachments

          Activity

            People

            • Assignee:
              aconway Alan Conway
              Reporter:
              aconway Alan Conway
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: