[rabbitmq-discuss] ldap user declare queue =problem

Matthias Radestock matthias at rabbitmq.com
Sun Sep 1 11:31:30 BST 2013


Muniek,

On 29/08/13 14:18, Artur Nike wrote:
> LDAP works ok, but the LDAP-user can not declare exchanges and queues,
> (login wheel:pass it works, published msg to exchange works, read msg
> from queque works )
> [...]
> =INFO REPORT==== 29-Aug-2013::14:24:05 ===
>      LDAP evaluated in_group for "cn=wheel,o=org1,dc=nodomain": false
>
> =INFO REPORT==== 29-Aug-2013::14:24:05 ===
> LDAP DECISION: configure permission for queue "tyerter" in "/" for
> "wheel": denied

As you can see from the above, the 'in_group' query returns false, so 
that's the problem.

By contrast, publishing to an exchange / consuming from a queue work 
because your config has '{constant, true}' for those.

Matthias.


More information about the rabbitmq-discuss mailing list