[rabbitmq-discuss] Unable to list queues via rabbitmqctl or Management Plugin

[Cordell, Ron]

We are using the LDAP plugin to manage access to RabbitMQ. Here is the rabbit.config file:

[
  {rabbit, [{auth_backends, [rabbit_auth_backend_ldap]},
            {ssl_listeners, [5671]},
{frame_max, 0},
{cluster_partition_handling, pause_minority},
            {ssl_options, [{fail_if_no_peer_cert, false},
                          { verify, verify_none}]},
            {default_vhost, <<"/">>}]},
  {rabbitmq_auth_backend_ldap,
   [ {servers,               ["RHB.AD"]},
     {dn_lookup_attribute,   "userPrincipalName"},
     {dn_lookup_base,        "DC=RHB,DC=AD"},
     {user_dn_pattern,       "${username}@RHB.AD"},
     {use_ssl,               false},
     {port,                  389},
     {log,                   false},
     {vhost_access_query,    {in_group, "CN=INRMQ_DG - ${vhost} vHost Read Permissions,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}},
     {resource_access_query,
      {for, [{permission, configure, {in_group, "CN=INRMQ_DG - ${vhost} vHost Read Permissions,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}},
             {permission, write,
              {for, [{resource, queue,    {in_group, "CN=INRMQ_DG - ${vhost} vHost Write Permissions,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}},
                     {resource, exchange, {in_group, "CN=INRMQ_DG - ${vhost} vHost Write Permissions,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}}]}},
             {permission, read,
              {for, [{resource, exchange, {in_group, "CN=INRMQ_DG - ${vhost} vHost Read Permissions,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}},
                     {resource, queue,    {in_group, "CN=INRMQ_DG - ${vhost} vHost Read Permissions,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}}]}}
            ]
      }},

{tag_queries,    [{management,  {in_group, "CN=INRMQ_DG - RabbitMQ User Access Management,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}},
 {monitoring,        {in_group, "CN=INRMQ_DG - RabbitMQ User Access Monitoring,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}},
 {administrator,     {in_group, "CN=Access Profile - SCM,OU=Access Profiles,OU=Servers,DC=RHB,DC=AD"}},
                      {administrator,     {in_group, "CN=INRMQ_DG - RabbitMQ User Access Administrator,OU=INRMQ,OU=INTEGRATION,OU=Environments,OU=Servers,DC=RHB,DC=AD"}}]}
   ]
  }
].
My user is in all groups.

I am able to see all the queues from the Management Plugin.
However, I am not able to list queues from the rabbitmqctl command:


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

C:\Windows\system32>e:

E:\>cd RabbitMQ\rabbitmq_server-3.1.5\sbin

E:\RabbitMQ\rabbitmq_server-3.1.5\sbin>rabbitmqctl list_queues -p vortex name
Listing queues ...
Terminate batch job (Y/N)? y

E:\RabbitMQ\rabbitmq_server-3.1.5\sbin>


No output appears and I have to kill the command. Examining the rabbitmq log, I see the following:


=ERROR REPORT==== 12-Sep-2013::11:54:22 ===
webmachine error: path="/api/queues"
"Unauthorized"

=ERROR REPORT==== 12-Sep-2013::11:54:32 ===
webmachine error: path="/api/queues"
"Unauthorized"

=ERROR REPORT==== 12-Sep-2013::11:54:42 ===
webmachine error: path="/api/queues"
"Unauthorized"



I'm not sure what's happening here and why I am unable to list the queues from a particular vHost.

Cheers,

Ron




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rabbitmq.com/pipermail/rabbitmq-discuss/attachments/20130912/c276f587/attachment.htm>