Bug 874516 – [RFE] Per-user configurable limit on the number of active connections

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 874516 - [RFE] Per-user configurable limit on the number of active connections

Summary:	[RFE] Per-user configurable limit on the number of active connections

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise MRG
Classification:	Red Hat
Component:	qpid-cpp (Show other bugs)
Sub Component:
Version:	Development
Hardware:	All All

Priority	medium Severity high
Target Milestone:	3.0
Target Release:	---
Assigned To:	Chuck Rolke
QA Contact:	Zdenek Kraus
Docs Contact:

URL:
Whiteboard:
Keywords:	FutureFeature

Depends On:	866219
Blocks:	785156 957978
	Show dependency tree / graph

Reported:	2012-11-08 06:02 EST by J.H.M. Dassen (Ray)
Modified:	2014-09-24 11:05 EDT (History)
CC List:	13 users (show)

See Also:	477623
Fixed In Version:	qpid-cpp-0.22-10
Doc Type:	Enhancement
Doc Text:	It is now possible to configure the active connection limit for individual users. Having one setting for all users was identified as being insufficient: Administrators and Broker monitors require many connections while public clients must be limited to few connections. With the new scheme, individual users can now have connection limits set through the ACL file. Both users, and groups of users can now be configured to receive many or few connections (including zero connections if this is applicable).
Story Points:	---
Clone Of:	866219
Clones:	957978 (view as bug list)
Environment:
Last Closed:	2014-09-24 11:05:31 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Apache JIRA	QPID-4054	None	None	None	Never
Apache JIRA	QPID-5011	None	None	None	Never
Red Hat Knowledge Base (Solution)	261773	None	None	None	2012-11-12 08:40:06 EST
Red Hat Product Errata	RHEA-2014:1296	normal	SHIPPED_LIVE	Red Hat Enterprise MRG Messaging 3.0 Release	2014-09-24 15:00:06 EDT

Groups: None (edit)

Comment 3 Chuck Rolke 2013-02-10 21:48:14 EST

This feature is implemented upstream in r1444302.

The implementation is exposed in review https://reviews.apache.org/r/9260/

Comment 4 Chuck Rolke 2013-02-28 10:51:21 EST

Also include r1450841

Comment 6 Zdenek Kraus 2013-07-01 04:33:27 EDT

Hi Chuck,

could you please provide some info on how this should be used, like what is the syntax, etc.

thanks.

Comment 7 Chuck Rolke 2013-07-01 10:12:52 EDT

The syntax in the file is at:

https://cwiki.apache.org/confluence/display/qpid/ACL#ACL-ACLFileSyntax

  acl allow bob create queue
  quota connections 100 alice bob charlie

Discussion of the interaction between command line options and ACL file quota settings is at:

https://cwiki.apache.org/confluence/display/qpid/ACL#ACL-QuotaSettings

Comment 9 Zdenek Kraus 2013-07-22 04:31:04 EDT

I've discovered following problems with this implementation:

1. The connection quota value zero allows one connection in
quota connections 0 usera@QPID

./qc2_connector -b usera/usera@localhost:5672 -c 10
2013-07-18 13:06:28 [Client] warning Broker closed connection: 320, connection-forced: User connection denied by configured limit
connection-forced: User connection denied by configured limit
1 9 10

^ ^ ^
^ ^ requested connections
^ failed connection
connected sucessfully

Comment 11 Chuck Rolke 2013-08-05 10:11:55 EDT

Issue reported in Comment 9, 2013-07-23 
* New jira QPID-5011
* Fixed upstream at r1505823

Comment 13 Zdenek Kraus 2013-09-11 08:05:38 EDT

Tested on x86 and x86_64 with packages:
python-qpid-0.22-4.el6.noarch
python-qpid-qmf-0.22-10.el6.x86_64
qpid-cpp-client-0.22-13.el6.x86_64
qpid-cpp-client-devel-0.22-13.el6.x86_64
qpid-cpp-client-devel-docs-0.22-13.el6.noarch
qpid-cpp-client-rdma-0.22-13.el6.x86_64
qpid-cpp-client-ssl-0.22-13.el6.x86_64
qpid-cpp-debuginfo-0.22-13.el6.x86_64
qpid-cpp-server-0.22-13.el6.x86_64
qpid-cpp-server-devel-0.22-13.el6.x86_64
qpid-cpp-server-ha-0.22-13.el6.x86_64
qpid-cpp-server-rdma-0.22-13.el6.x86_64
qpid-cpp-server-ssl-0.22-13.el6.x86_64
qpid-cpp-server-store-0.22-13.el6.x86_64
qpid-cpp-server-xml-0.22-13.el6.x86_64
qpid-java-client-0.22-5.el6.noarch
qpid-java-common-0.22-5.el6.noarch
qpid-java-example-0.22-5.el6.noarch
qpid-proton-c-0.5-2.el6.x86_64
qpid-qmf-0.22-10.el6.x86_64
qpid-tools-0.22-3.el6.noarch

-> VERIFIED

Comment 14 errata-xmlrpc 2014-09-24 11:05:31 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2014-1296.html

Note You need to log in before you can comment on or make changes to this bug.