Referring to
http://qpid.apache.org/releases/qpid-cpp-1.37.0/cpp-broker/book/chap-Messaging_User_Guide-Security.html#sect-Messaging_User_Guide-Authorization-Specifying_ACL_Queue_Limits
Queue limits are disabled unless there is an ACL file with a 'quota queues'
entry.
As an aid to understanding the quota enforcement start the broker with
'--log-enable trace+:Security --log-enable info+' on the command line.
I ran your example with an acl file
quota queues 4 all
acl allow all all
It creates the first three queues (q1..q3) but then apparently fails to create
the fourth queue. This is surprising and not intuitive but the reason is that
the qpid-config command itself creates a temporary reply queue that is the
fourth allowed queue. Then the attempt to create the fourth queue (q4) is
denied since that user already has four queues. The log files should help
expose the workings that arrive at this result.
----- Original Message -----
> From: "Michael Ivanov" <[email protected]>
> To: [email protected]
> Sent: Thursday, January 18, 2018 4:53:18 AM
> Subject: Max number of queues per user
>
> Greetings!
>
> I'm trying to limit max nummber of queues that user can create.
> I turned on authentication, started qpidd with --max-queues-per-user 4
> option and then create queues using following command:
>
> qpid-config -b amqps://username@hostname:5671 add queue Qn
>
> where n = 1, 2, 3, etc.
>
> I expected queue creation to fail at 5th queue, but it was created.
> Do I need to use acls to enforce this limit?
>
> Best regards,
> --
> Michael Ivanov
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
