[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15121705#comment-15121705 ] ASF subversion and git services commented on PROTON-1055: - Commit 9e852c5f1080007e258790ec138c047adea7126c in qpid-proton's branch refs/heads/0.12.x from [~astitcher] [ https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git;h=9e852c5 ] PROTON-1055: Change SASL PLAIN for better interop: - Don't send a username, because it is always derived from the authentication id (some servers get erroneously confused when the username is present) > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Assignee: Andrew Stitcher > Fix For: 0.13.0 > > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message w
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15121670#comment-15121670 ] Justin Ross commented on PROTON-1055: - Reviewed by Robbie. Approved for 0.12.0. > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Assignee: Andrew Stitcher > Fix For: 0.13.0 > > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15121361#comment-15121361 ] Robbie Gemmell commented on PROTON-1055: The change looks good to me, and I think it should be included in the 0.12.0 release. I tested this out (using cyrus SASL) against ActiveMQ 5.12.1 ( what this issue was reported using, and the last release before AMQ-6055 was resolved) by configuring the SimpleAuthenitcationPlugin with a username:password (which must not be equal, to show the bug) as follows: {noformat} {noformat} I then tried to log in using the 0.12.0-beta python bindings, which as shown below failed: {noformat} [0xf61cb0]:0 -> @sasl-init(65) [mechanism=:PLAIN, initial-response=b"user1\x00user1\x00pass1"] [0xf61cb0]:0 <- @sasl-outcome(68) [code=1] {noformat} I then applied this change to the beta and tried again, which due to not setting the authzid then succeeded: {noformat} [0x208c510]:0 -> @sasl-init(65) [mechanism=:PLAIN, initial-response=b"\x00user1\x00pass1"] [0x208c510]:0 <- @sasl-outcome(68) [code=0] {noformat} > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Assignee: Andrew Stitcher > Fix For: 0.13.0 > > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_passwor
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15120156#comment-15120156 ] ASF subversion and git services commented on PROTON-1055: - Commit 6f8bc907c47eb05a6923feb7e3fc9d180aecc9c4 in qpid-proton's branch refs/heads/master from [~astitcher] [ https://git-wip-us.apache.org/repos/asf?p=qpid-proton.git;h=6f8bc90 ] PROTON-1055: Change SASL PLAIN for better interop: - Don't send a username, because it is always derived from the authentication id (some servers get erroneously confused when the username is present) > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Assignee: Andrew Stitcher > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message was sent by Atlassian JIRA (v6.3.
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15118021#comment-15118021 ] Andrew Stitcher commented on PROTON-1055: - Note for the purposes of reproducing this problem the last version of ActiveMQ that shouldn't accept the SASL behaviour noted is 5.12.1 > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Assignee: Andrew Stitcher > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15018133#comment-15018133 ] Andrew Stitcher commented on PROTON-1055: - Looking at the proton sasl code I see that the built in implementation of PLAIN does duplicate the username - and it seems from the rfc text ~gsim quoted it probably shouldn't. That is assuming that this code is using built in sasl code. If this is the proton-c code with Cyrus SASL built in then we are not in control of the details of the packets sent by that sasl implementation. ~simmel can you comment on whether you are using the built-in or Cyrus SASL implementations? > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Priority: Blocker > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {c
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15016704#comment-15016704 ] Robbie Gemmell commented on PROTON-1055: It seems like a separate issue (and possibly specific to Messenger, rather than the core engine like this one is) so I'd raise a new JIRA. If you are using just starting out I'd also suggest giving the newer reactive API bits a look instead might be worthwhile, since they have more developer attention on them these days than Messenger. > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Priority: Blocker > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15016691#comment-15016691 ] Simon Lundstrom commented on PROTON-1055: - Oh right, the second case where using SSL just hangs QPid Proton. Should I file that seperately or will that be fixed within this issue? The prefered way to handle it would be to raise it as a authentication error and close the connection IMO. > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Priority: Blocker > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15016197#comment-15016197 ] Simon Lundstrom commented on PROTON-1055: - Ah, yes. It looks like ActiveMQs SASL lib doesn't take authzid into account. To answer [~gemmellr], I'm not sure that authzid is useful in messaging but it might be. None the less, it's part of the SASL PLAIN standard so ActiveMQ must handle it. I'll report a bug on their Jira and refer back to this ticket. Feel free to close this ticket depending on that you decide/come up with. Thanks! > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Priority: Blocker > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15015565#comment-15015565 ] Robbie Gemmell commented on PROTON-1055: I think whats happening is that since support for cyrus sasl was introduced to proton-c the PLAIN initial-response now contains the optional authzid value as well as the authcid, in this case both having the value of the given username. The other end looks to be ActiveMQ. It would seem it can't handle the authzid being present, which I agree seems like a bug on that end. @Andrew Stitcher is the man in the know on the proton sasl bits. ANy thoughts Andrew? Its not clear to me that including the authzid is useful if it can't be configured to a value other than the username (do we have config for that?), and in case that it can't then it may even be incorrect to include it. My reading suggests that the authzid is for requesting to act as *another* identity when you don't want it to be derived from the authcid being presented, so where they are equal it seems redundant (and certainly troublesome in this case) to include it, and also makes the assumption that the derived authzid was going to be equal to the username which as mentioned in the RFC it need not be. > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Priority: Blocker > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15015544#comment-15015544 ] Gordon Sim commented on PROTON-1055: This is not wrong. From https://tools.ietf.org/html/rfc4616 {quote} The client presents the authorization identity (identity to act as), followed by a NUL (U+) character, followed by the authentication identity (identity whose password will be used), followed by a NUL (U+) character, followed by the clear-text password. As with other SASL mechanisms, the client does not provide an authorization identity when it wishes the server to derive an identity from the credentials and use that as the authorization identity. {quote} What is the server you are connecting to? Is it possible the error lies on that side? > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Priority: Blocker > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-z
[jira] [Commented] (PROTON-1055) Username sent twice during SASL AUTH
[ https://issues.apache.org/jira/browse/PROTON-1055?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15015406#comment-15015406 ] Simon Lundstrom commented on PROTON-1055: - PROTON-995 might be related? > Username sent twice during SASL AUTH > > > Key: PROTON-1055 > URL: https://issues.apache.org/jira/browse/PROTON-1055 > Project: Qpid Proton > Issue Type: Bug > Components: proton-c, python-binding >Affects Versions: 0.10 > Environment: # lsb_release -a > No LSB modules are available. > Distributor ID: Ubuntu > Description:Ubuntu 14.04.3 LTS > Release:14.04 > Codename: trusty > # uname -a > Linux esb-test-mq01 3.13.0-67-generic #110-Ubuntu SMP Fri Oct 23 13:24:41 UTC > 2015 x86_64 x86_64 x86_64 GNU/Linux > # python --version > Python 2.7.6 >Reporter: Simon Lundstrom >Priority: Blocker > > In versions >0.9.1.1 (We've tried 0.10 and 0.11.0) the username is sent twice > during SASL authentication. > Working in 0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x250d3b0]: -> SASL > [0x250d3b0]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"\x00the_username\x00the_password"] > [0x250d3b0]: <- SASL > [0x250d3b0]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x250d3b0]:0 <- @sasl-outcome(68) [code=0] > [0x250d3b0]: -> AMQP > [0x250d3b0]:0 -> @open(16) > [container-id="6b1fecb6-358e-48af-b461-bae3563a7c7f", hostname="esb-test"] > [0x250d3b0]:0 -> @begin(17) [next-outgoing-id=0, incoming-window=2147483647, > outgoing-window=1] > [0x250d3b0]:0 -> @attach(18) [name="sender-xxx", handle=0, role=false, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue", durable=0, timeout=0, dynamic=false], > target=@target(41) [address="TEST-queue", durable=0, timeout=0, > dynamic=false], initial-delivery-count=0] > [0x250d3b0]: <- AMQP > [0x250d3b0]:0 <- @open(16) [container-id="", hostname="", > max-frame-size=4294967295, channel-max=32767, idle-time-out=15000, > offered-capabilities=@PN_SYMBOL[:"ANONYMOUS-RELAY"], > properties={:product="ActiveMQ", :"topic-prefix"="topic://", > :"queue-prefix"="queue://", :version="5.12.1", :platform="Java/1.8.0_45"}] > [0x250d3b0]:0 <- @begin(17) [remote-channel=0, next-outgoing-id=1, > incoming-window=0, outgoing-window=0, handle-max=65535] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0] > [0x250d3b0]:0 <- @attach(18) [name="sender-xxx", handle=0, role=true, > snd-settle-mode=2, rcv-settle-mode=0, source=@source(40) > [address="TEST-queue"], target=@target(41) [address="TEST-queue"]] > [0x250d3b0]:0 <- @flow(19) [next-incoming-id=0, incoming-window=2147483647, > next-outgoing-id=1, outgoing-window=0, handle=0, delivery-count=0, > link-credit=1000] > [0x250d3b0]:0 -> @transfer(20) [handle=0, delivery-id=0, > delivery-tag=b"\x00\x00\x00\x00\x00\x00\x00\x00", message-format=0, > settled=true, more=false] (131) "\x00[…]" > # > {code} > Not working in >0.9.1.1: > {code} > # PN_TRACE_FRM=1 ./meow.py > [0x18aa060]: -> SASL > [0x18aa060]: <- SASL > [0x18aa060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0x18aa060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0x18aa060]:0 <- @sasl-outcome(68) [code=1] > [0x18aa060]: -> EOS > # > {code} > When using >0.9.1.1 and using SSL it does the same BUT then just hangs. > Should we open a seperate Jira for this?: > {code} > # PN_TRACE_FRM=1 time ./meow.py > [0xa5d060]: -> SASL > [0xa5d060]: <- SASL > [0xa5d060]:0 <- @sasl-mechanisms(64) > [sasl-server-mechanisms=@PN_SYMBOL[:PLAIN, :ANONYMOUS]] > [0xa5d060]:0 -> @sasl-init(65) [mechanism=:PLAIN, > initial-response=b"the_username\x00the_username\x00the_password"] > [0xa5d060]:0 <- @sasl-outcome(68) [code=1] > ^CTraceback (most recent call last): > File "./meow.py", line 12, in > messenger.send() > File "/usr/local/lib/python2.7/dist-packages/proton/__init__.py", line 568, > in send > self._check(pn_messenger_send(self._mng, n)) > KeyboardInterrupt > Command exited with non-zero status 1 > 0.08user 0.02system 0:50.69elapsed 0%CPU (0avgtext+0avgdata 12192maxresident)k > 0inputs+0outputs (0major+5474minor)pagefaults 0swaps > # > {code} -- This message was sent by Atlassian JIRA (v6.3.4#6332)