Chuck Rolke created DISPATCH-299:
------------------------------------

             Summary: After policy rejects a connection queued Begin causes a 
crash
                 Key: DISPATCH-299
                 URL: https://issues.apache.org/jira/browse/DISPATCH-299
             Project: Qpid Dispatch
          Issue Type: Bug
          Components: Policy Engine
    Affects Versions: 0.6
            Reporter: Chuck Rolke


Over the wire the router sees:
{noformat}
Wed Apr 27 16:07:23 2016 SERVER (trace) [1]:AMQP 1.0 layer detected

Wed Apr 27 16:07:23 2016 SERVER (trace) [1]:  <- AMQP

Wed Apr 27 16:07:23 2016 SERVER (trace) [1]:0 <- @open(16) 
[container-id="B730345F-FCA9-4F05-9305-ACA2C04B55C9", hostname="172.28.128.5", 
channel-max=32767]

Wed Apr 27 16:07:23 2016 SERVER (trace) [1]:0 <- @begin(17) 
[next-outgoing-id=0, incoming-window=2147483647, outgoing-window=2147483647]

Wed Apr 27 16:07:23 2016 SERVER (trace) [1]:0 <- @attach(18) 
[name="sender-xxx", handle=0, role=false, snd-settle-mode=2, rcv-settle-mode=0, 
source=@source(40) [durable=0, timeout=0, dynamic=false], target=@target(41) 
[durable=0, timeout=0, dynamic=false], initial-delivery-count=0]

Wed Apr 27 16:07:23 2016 SERVER (trace) [1]:  -> AMQP

Wed Apr 27 16:07:23 2016 POLICY (info) DENY AMQP Open for user 'anonymous', 
host '172.28.128.1', application '172.28.128.5': User is not in a user group 
and default users are denied

Wed Apr 27 16:07:23 2016 POLICY (trace) ALLOW AMQP Begin Session. user: 
anonymous, hostip: 172.28.128.1, app: 172.28.128.5

Wed Apr 27 16:07:23 2016 POLICY (info) DENY AMQP Attach anonymous sender for 
user 'anonymous', host '172.28.128.1', app '172.28.128.5'
{noformat}

After policy has rejected the connection it is unprepared to process the Begin 
event and further events on the connection should be dropped.




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to