On 05/29/2013 12:41 PM, Sree82 wrote:
HI
I am using Qpid C++ broker version 0-10.
I m trying to connect to a broker in another machine.
I get the following error:
warning Closing connection due to internal-error: Sasl error: SASL(-1):
generic failure: GSSAPI Error: An invalid name was supplied (Cannot
determine realm for numeric host address) (qpid/SaslFactory.cpp:279)
I could see this as an authentication mechanism issue .. I am not sure
though.
The auth mechanism is not mentioned in the qpidd.conf file on the system to
which I am trying to connect.
What is the default authentication mechanism that qpidd uses ? and should i
mention the authentication mechanism in my code as well ?
On linux, the c++ client & broker use the Cyrus SASL libraries to
implement SASL. The error above comes from GSSAPI being chosen as the
most secure mutually supported option, but not having it actually
correctly configured for use.
Assuming you don't want to use that mechanism, you can restrict the set
of valid mechanisms. This can be done either on the client, or through
the broker side configuration. The /etc/sasl2/qpidd.conf file can
contain a mech_list option, specifying the allowed mechanisms. E.g.
mech_list: ANONYMOUS DIGEST-MD5 EXTERNAL PLAIN
When you say you are trying to connect to a broker on another machine,
is that through a particular client API (if so which one?) or by setting
up an inter-broker connection?
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
