8cbf3c170d
If the version of qpidd does not support setting the SASL service name as required by AMQP 1.0, then authentication is not possible. Change-Id: I74f2bb094fc0dbae0525ba535a60fe80661e89f2 Closes-Bug: #1496573
116 lines
2.8 KiB
Bash
Executable File
116 lines
2.8 KiB
Bash
Executable File
#!/bin/bash
|
|
#
|
|
# Usage: setup-test-env-qpid.sh PROTOCOL <command to run>
|
|
# where PROTOCOL is the version of the AMQP protocol to use with
|
|
# qpidd. Valid values for PROTOCOL are "1", "1.0", "0-10", "0.10"
|
|
set -e
|
|
|
|
# require qpidd, qpid-tools sasl2-bin/cyrus-sasl-plain+cyrus-sasl-lib
|
|
|
|
. tools/functions.sh
|
|
|
|
DATADIR=$(mktemp -d /tmp/OSLOMSG-QPID.XXXXX)
|
|
trap "clean_exit $DATADIR" EXIT
|
|
|
|
QPIDD=$(which qpidd 2>/dev/null)
|
|
|
|
# which protocol should be used with qpidd?
|
|
# 1 for AMQP 1.0, 0.10 for AMQP 0.10
|
|
#
|
|
PROTOCOL=$1
|
|
case $PROTOCOL in
|
|
"1" | "1.0")
|
|
PROTOCOL="1"
|
|
shift
|
|
;;
|
|
"0.10" | "0-10")
|
|
PROTOCOL="0-10"
|
|
shift
|
|
;;
|
|
*)
|
|
# assume the old protocol
|
|
echo "No protocol specified, assuming 0.10"
|
|
PROTOCOL="0-10"
|
|
;;
|
|
esac
|
|
|
|
# ensure that the version of qpidd does support AMQP 1.0
|
|
if [ $PROTOCOL == "1" ] && ! `$QPIDD --help | grep -q "queue-patterns"`; then
|
|
echo "This version of $QPIDD does not support AMQP 1.0"
|
|
exit 1
|
|
fi
|
|
|
|
[ -f "/usr/lib/qpid/daemon/acl.so" ] && LIBACL="load-module=/usr/lib/qpid/daemon/acl.so"
|
|
|
|
cat > ${DATADIR}/qpidd.conf <<EOF
|
|
port=65123
|
|
sasl-config=${DATADIR}/sasl2
|
|
${LIBACL}
|
|
mgmt-enable=yes
|
|
log-to-stderr=no
|
|
EOF
|
|
|
|
# sadly, older versions of qpidd (<=0.32) cannot authenticate against
|
|
# newer versions of proton (>=0.10). If this version of qpidd does
|
|
# not support the fix, then do not require authentication
|
|
|
|
if [ $PROTOCOL == "1" ] && ! `$QPIDD --help | grep -q "sasl-service-name"`; then
|
|
echo "This version of $QPIDD does not support SASL authentication with AMQP 1.0"
|
|
cat >> ${DATADIR}/qpidd.conf <<EOF
|
|
auth=no
|
|
EOF
|
|
else
|
|
cat >> ${DATADIR}/qpidd.conf <<EOF
|
|
auth=yes
|
|
acl-file=${DATADIR}/qpidd.acl
|
|
EOF
|
|
fi
|
|
|
|
if [ $PROTOCOL == "1" ]; then
|
|
cat >> ${DATADIR}/qpidd.conf <<EOF
|
|
# Used by AMQP1.0 only
|
|
queue-patterns=exclusive
|
|
queue-patterns=unicast
|
|
topic-patterns=broadcast
|
|
EOF
|
|
# versions of qpidd >0.32 require this for AMQP 1 and SASL:
|
|
if `$QPIDD --help | grep -q "sasl-service-name"`; then
|
|
cat >> ${DATADIR}/qpidd.conf <<EOF
|
|
sasl-service-name=amqp
|
|
EOF
|
|
fi
|
|
fi
|
|
|
|
cat > ${DATADIR}/qpidd.acl <<EOF
|
|
group admin stackqpid@QPID
|
|
acl allow admin all
|
|
acl deny all all
|
|
EOF
|
|
|
|
mkdir -p ${DATADIR}/sasl2
|
|
cat > ${DATADIR}/sasl2/qpidd.conf <<EOF
|
|
pwcheck_method: auxprop
|
|
auxprop_plugin: sasldb
|
|
sasldb_path: ${DATADIR}/qpidd.sasldb
|
|
EOF
|
|
|
|
# TODO(kgiusti): we can remove "ANONYMOUS" once proton 0.10.1+ is released:
|
|
# https://issues.apache.org/jira/browse/PROTON-974
|
|
if [ $PROTOCOL == "1" ]; then
|
|
cat >> ${DATADIR}/sasl2/qpidd.conf <<EOF
|
|
mech_list: PLAIN ANONYMOUS
|
|
EOF
|
|
else
|
|
cat >> ${DATADIR}/sasl2/qpidd.conf <<EOF
|
|
mech_list: PLAIN
|
|
EOF
|
|
fi
|
|
|
|
echo secretqpid | saslpasswd2 -c -p -f ${DATADIR}/qpidd.sasldb -u QPID stackqpid
|
|
|
|
mkfifo ${DATADIR}/out
|
|
$QPIDD --log-enable info+ --log-to-file ${DATADIR}/out --config ${DATADIR}/qpidd.conf &
|
|
wait_for_line "Broker .*running" "error" ${DATADIR}/out
|
|
|
|
$*
|