Re: Setting up Kerberos security

2013-03-12 Thread Gordon Sim
On 03/11/2013 10:38 AM, Davide Anastasia wrote: If I call again my tool, I get a slightly different error: 2013-03-11 10:34:25 warning Closing connection due to internal-error: Sasl error: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more informatio

RE: Setting up Kerberos security

2013-03-11 Thread Davide Anastasia
Subject: Re: Setting up Kerberos security On 08/14/2012 03:03 PM, Davide Anastasia wrote: > I've created the keytab file as specified in the Qpid user manual [1] > and I have set the environment variable as well. What about the realm? Have you set that? (Previous error message looked l

Re: Setting up Kerberos security

2012-08-14 Thread Gordon Sim
On 08/14/2012 03:03 PM, Davide Anastasia wrote: I've created the keytab file as specified in the Qpid user manual [1] and I have set the environment variable as well. What about the realm? Have you set that? (Previous error message looked like you were using EXAMPLE.COM?) However, I haven't

RE: Setting up Kerberos security

2012-08-14 Thread Davide Anastasia
[1] http://qpid.apache.org/books/trunk/AMQP-Messaging-Broker-CPP-Book/html/c hap-Messaging_User_Guide-Security.html -Original Message- From: Gordon Sim [mailto:g...@redhat.com] Sent: 14 August 2012 12:35 To: users@qpid.apache.org Subject: Re: Setting up Kerberos security On 08/14/2012 11:33

Re: Setting up Kerberos security

2012-08-14 Thread Gordon Sim
On 08/14/2012 11:33 AM, Davide Anastasia wrote: Yes, I can kinit the server without problem. Ok, that is good. The next thing to check is that the qpidd process can access the keytab in which its service principal can be found.

RE: Setting up Kerberos security

2012-08-14 Thread Davide Anastasia
Hi, Yes, I can kinit the server without problem. I'll go thru the document linked to see whether my krb5.conf is set correctly. Best, Davide -Original Message- From: Gordon Sim [mailto:g...@redhat.com] Sent: 13 August 2012 12:38 To: users@qpid.apache.org Subject: Re: Setti

Re: Setting up Kerberos security

2012-08-13 Thread Gordon Sim
On 08/13/2012 12:25 PM, Davide Anastasia wrote: Hi Gordon, I'm trying to setup my Kerberos subsystem, hence I don't exclude there are errors in my current configuration. Is there anything that I should check more specifically? The first test is whether you can kinit a user successfully on the

RE: Setting up Kerberos security

2012-08-13 Thread Davide Anastasia
2 15:40 To: users@qpid.apache.org Subject: Re: Setting up Kerberos security On 08/09/2012 05:55 PM, Davide Anastasia wrote: > Hi, > I'm using the C++ messaging API to connect to the broker. cyrus-sasl > is available. > After changing /etc/sasl2/qpidd.conf, I receive this error: >

Re: Setting up Kerberos security

2012-08-10 Thread Gordon Sim
On 08/09/2012 05:55 PM, Davide Anastasia wrote: Hi, I'm using the C++ messaging API to connect to the broker. cyrus-sasl is available. After changing /etc/sasl2/qpidd.conf, I receive this error: 2012-08-09 17:55:20 warning Closing connection due to internal-error: Sasl error: SASL(-1): generic f

RE: Setting up Kerberos security

2012-08-09 Thread Davide Anastasia
r code may provide more information (Server krbtgt/c...@example.com not found in Kerberos database) (qpid/SaslFactory.cpp:280)" thrown in the test body. Best, Davide -Original Message- From: Gordon Sim [mailto:g...@redhat.com] Sent: 09 August 2012 15:40 To: users@qpid.apache.org Subject:

Re: Setting up Kerberos security

2012-08-09 Thread Gordon Sim
On 08/09/2012 02:52 PM, Davide Anastasia wrote: Hi Gordon, I'm using the C++ broker, v. 0.14, the one shipped with RHEL6. I have used the guide in your page to set up the Kerberos server, without success. Ok, and what client(s) are you using to connect? How can I explicitly require GSSAPI as

Re: Setting up Kerberos security

2012-08-09 Thread Pavel Moravec
pache.org > Sent: Thursday, August 9, 2012 3:52:49 PM > Subject: RE: Setting up Kerberos security > > Hi Gordon, > I'm using the C++ broker, v. 0.14, the one shipped with RHEL6. > I have used the guide in your page to set up the Kerberos server, > without success. > >

RE: Setting up Kerberos security

2012-08-09 Thread Davide Anastasia
hether the cyrus-sasl is available. Best, Davide -Original Message- From: Gordon Sim [mailto:g...@redhat.com] Sent: 09 August 2012 10:05 To: users@qpid.apache.org Subject: Re: Setting up Kerberos security On 08/08/2012 05:00 PM, Davide Anastasia wrote: > Hi All, > > Can anybody

Re: Setting up Kerberos security

2012-08-09 Thread Gordon Sim
On 08/08/2012 05:00 PM, Davide Anastasia wrote: Hi All, Can anybody point me to a guide that could help me to setup Kerberos to work with Qpid? Which broker are you using? qpidd (i.e. c++) or qpid-server (Java). If the former, is http://qpid.apache.org/books/0.16/AMQP-Messaging-Broker-CPP-Bo

Setting up Kerberos security

2012-08-08 Thread Davide Anastasia
Hi All, Can anybody point me to a guide that could help me to setup Kerberos to work with Qpid? I've been trying to follow the steps described in the User Manual, but Qpid still uses its SASL database for authentication. Best, Davide Anastasia Analyst, Research & Development Quality Cap