I'm not totally sure what you mean by what you've said below :-/

As I say I've tried with settings that should create a Java ConnectionURL with anonymous:anonymous at the start, which ought to be the same as you changing the ConnectionHelper username/password Strings from guest to anonymous but I'm seeing "warning Failed to retrieve sasl username" when I do.

I can't quite reconcile what you reckon you're seeing with what I'm seeing. What I'm seeing would seem to align with what Pavel covered in the Jira he mentioned.

I don't think this is sasl per se, because if I use plain old qpid-config that would connect to localhost:5672 as anonymous and I don't get the warning, so it seems to be how Java ConnectionURLs are handled.

Were you able to enable logging and pull out the URL ConnectionHelper created to give to the underlying ConnectionFactory?



On a different note I'm still struggling to figure out why your data updates might be sluggish/unreliable. You mentioned you're using Chrome - that's normally pretty well behaved and supports a decent number of HTTP connections. I tried Chrome on a netbook to my REST Server and it behaved perfectly.


Is there anything unusual about your network/topology etc. At this stage it'd be good if you could go back to basics and work out from there. Would you be able to try running up a broker on the same host as QpidRestAPI with --auth no then working out from there adding auth and moving out to the brokers you actually care about?

I'm afraid that all the dev on this has been done in my spare time and my home network has only got one Linux server, though I've tried a ton of browsers and I've got a fairly big WiFi set up with two Access Points and haven't seen issues even using avahi so my server has a sensible name on my private network. But I've not been able to try QpidRestAPI and the broker on different hosts.

I can't think of any *obvious* reasons why there should be any problems though because the underlying QMF2 stuff is really just a JMS client, so if you have QMF problems between two hosts then I'd expect any other Qpid application would behave equally weirdly. As a thought what happens if you run qpid-queue-stats on the host you're running QpidRestAPI on and pointing that to the broker in question. That's *really* worth checking because qpid-queue-stats gets data pushed by the broker periodically.

I assume you've checked that any network you have between the hosts behaves normally for everything else? Probably not relevant, but I once had a NIC that was a bit flaky and ended negotiating a half duplex link - imagine my surprise :-)

How heavily loaded is the broker that you are talking to when your updates are sluggish? The updates are every 10s and pull back more or less every QMF statistic serialising to JSON. I've tested with > 500 connections plus queues and bindings. Bear in mind when you get to this sort of number transfers might get to the MB size given the number of properties in queues, but unless you're on a really low bandwidth link you shouldn't notice that. On my setup top on Firefox was pretty modest doing that.

However if you are really trashing the broker too you might see quirks I set up queues that were far too big and connected slow consumers + fast producers and when my broker went in to swap unsurprisingly I'd see update glitches - but really the only time I've had anything other than regular updates was when I pushed the broker into swap - so I remain befuddled :-(


You didn't get back to me on this but you really really haven't got --mgmt-pub-interval set to anything other than the default have you??

If you look on the "broker" page on the GUI it'll be down as mgmtPubInterval. If you look at the uptime mine increments by 10 seconds every 10 seconds are you seeing any sort of periodicity?

Have you taken a look at the graphs for the QMF Queues, the one bound to qmf.default.direct and indeed the graph for that exchange ought to be quite spiky/noisy. Looking at that graph you should be able to see when your statistics updates are arriving.

I'm afraid I'm struggling to come up with answers on this, I'd be really interested to know what others are experiencing.

Frase


On 01/02/13 11:10, Bruno Matos wrote:
Hi Fraser,

I think the default sasl configuration will accept anything as the
username, it only forces the UserID of the message to be the same as the
authentication's username.

Regards.

On Ter, 2013-01-29 at 19:04 +0000, Fraser Adams wrote:
Hi Bruno,
are you *sure* that this worked?

So I've literally just tried a basic JMS consumer with a broker fired up
with qpidd (e.g. authentication enabled) and I used a ConnectionURL

connectionfactory.ConnectionFactory =
amqp://anonymous:anonymous@clientid/test?brokerlist='tcp://localhost:5672'

and my broker said:

2013-01-29 18:51:01 warning Failed to retrieve sasl username


Similarly if I add a URL of "anonymous/anonymous@localhost:5672" in the
GUI my broker says the same. This latter case creates a Java
ConnectionURL the same as my standalone JMS consumer mentioned above.

If I do qpidd --auth no it works fine, but not with authentication enabled.

If you enable log notice in the log4j.xml I think that ConnectionHelper
(in v1.1 anyway) spits out the Java ConnectionURL it created so it'd be
interesting to see what that says and if you could also confirm you
really did use the default this time (you didn't disable auth in config)

What you appear to be seeing all seems a bit odd, especially given
Pavel's mail about the outstanding bug, and as I say it's inconsistent
with what I've just seen, so I'm a bit baffled...

Frase

I changed the default username and password to anonymous in
ConnectionHelper.java:569, and it works for now. I don't know the
difference between guest/guest and anonymous/anonymous, usually I work
with authentication.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to