Bug 692045

Summary: qpidd broker on rhel6 (qpid-cpp-server-0.10-1.el6) does not contain qpidd.sasldb and thus guest authentication is not available there
Product: Red Hat Enterprise MRG Reporter: Frantisek Reznicek <freznice>
Component: qpid-cppAssignee: mick <mgoulish>
Status: CLOSED WONTFIX QA Contact: MRG Quality Engineering <mrgqe-bugs>
Severity: high Docs Contact:
Priority: unspecified    
Version: DevelopmentCC: esammons, gsim, kim.vdriet, matt, mgoulish
Target Milestone: 2.0   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-03-31 17:48:26 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 676345    

Description Frantisek Reznicek 2011-03-30 09:44:50 UTC
Description of problem:

qpidd broker on rhel6 (qpid-cpp-server-0.10-1.el6) does not contain qpidd.sasldb and thus guest authentication is not available there.

This seems to be packaging issue as qpidd reports this issue in his log:
Mar 30 05:33:15 mrg-qe-07 qpidd[12946]: unable to open Berkeley db /var/lib/qpidd/qpidd.sasldb: No such file or directory


[freznice@dhcp-26-251 _s]$ diff -u rhel55x rhel61x
--- rhel55x     2011-03-30 11:41:11.000000000 +0200
+++ rhel61x     2011-03-30 11:41:25.000000000 +0200
@@ -1,4 +1,4 @@
-[root@rhel55x ~]# rpm -ql qpid-cpp-server
+root@rhel61x ~]# rpm -ql qpid-cpp-server
 /etc/qpidd.conf
 /etc/rc.d/init.d/qpidd
 /etc/sasl2/qpidd.conf
@@ -10,8 +10,6 @@
 /usr/lib64/qpid/daemon/replication_exchange.so
 /usr/sbin/qpidd
 /usr/share/man/man1/qpidd.1.gz
-/usr/share/selinux/packages/qpidd.pp
 /var/lib/qpidd
-/var/lib/qpidd/qpidd.sasldb
 /var/run/qpidd

Version-Release number of selected component (if applicable):
qpid-cpp-server-0.10-1.el6

How reproducible:
100%

Steps to Reproduce:
1. service qpidd restart
2. from another host:
   qpid-config -a guest/guest@<host-rhel61>
   qpid-perftest -b <host-rhel61> --user guest --password guest --count 10 -s
3. echo $?
  
Actual results:
qpidd.sasldb missing in qpid-cpp-server-0.10-1.el6 -> guest authentication not working.

Expected results:
guest authentication should be working and qpidd.sasldb should be added.

Additional info:

Comment 1 Kim van der Riet 2011-03-30 11:24:09 UTC
This was deliberately removed because of multilib problems (ie the i686 and x86_64 versions of this file are not identical and overwrite one another). Also I was assured that this contains only a guest account which is not critical for "real-life" situations, and may even pose a security threat under some circumstances.

Comment 2 Matthew Farrellee 2011-03-30 12:03:39 UTC
Treat removal of the default guest account as a break in backward compatibility.

Comment 3 mick 2011-03-31 17:48:26 UTC
Please see new bug 692617, which replaces this.