Using <deny-all/> security plugin gives message "deny-all section takes no 
elements"
------------------------------------------------------------------------------------

                 Key: QPID-3300
                 URL: https://issues.apache.org/jira/browse/QPID-3300
             Project: Qpid
          Issue Type: Bug
          Components: Java Broker
    Affects Versions: 0.10
         Environment: java version "1.6.0_24"
Java(TM) SE Runtime Environment (build 1.6.0_24-b07-334-10M3326)
Java HotSpot(TM) 64-Bit Server VM (build 19.1-b02-334, mixed mode)
on Mac OS X 10.6.7
            Reporter: Keith Wall
            Assignee: Robbie Gemmell


I'm trying to configure the <deny-all/> security plugin.  Adding: 

{code}
<security>
   ...
   <deny-all/>
   ...
</security>
{code}

to the config.xml, but on starting the broker I see:

{code}
Error initialising message broker: 
org.apache.commons.configuration.ConfigurationException: deny-all section takes 
no elements.
org.apache.commons.configuration.ConfigurationException: deny-all section takes 
no elements.
        at 
org.apache.qpid.server.security.access.plugins.DenyAll$DenyAllConfiguration.validateConfiguration(DenyAll.java:59)
        at 
org.apache.qpid.server.configuration.plugins.ConfigurationPlugin.setConfiguration(ConfigurationPlugin.java:166)
        at 
org.apache.qpid.server.security.access.plugins.DenyAll$DenyAllConfiguration$1.newInstance(DenyAll.java:45)
{code}

It appears that the DenyAll#validateConfiguration is trying to assert that the 
<deny-all/> takes no child, but the validation is always throwing, regardless 
of whether the element has children or not.

I notice that this commit:

http://svn.apache.org/viewvc?view=revision&revision=951167

commented out the equivalent lines of code in the AllowAll plugin.


--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:[email protected]

Reply via email to