[rabbitmq-discuss] rabbit_auth_backend_ldap connect failed

Thu Aug 22 10:05:51 BST 2013

On 22/08/2013 9:41AM, SAG - Jonathan Andrés wrote:
> Thank you very much!
>
> Now I can see the logs of the LDAP Plugin. But I think this directive
> is not working:
>
> {other_bind, {"UserXXX", "PassXXX"}},

 From http://www.rabbitmq.com/ldap.html:

"For authentication this plugin binds to the LDAP server as the user it
is trying to authenticate. This option controls how to bind for
authorisation queries, and to retrieve the details of a user who is
logging in without presenting a password (e.g. SASL EXTERNAL)."

So other_bind is only used after authenticating the user. Looking at the
documentation for mod_auth_ldap it looks like the Apache module does a
search using the configured username before attempting to bind using the
provided username. The RabbitMQ plugin doesn't do that.

> And I have another question: Once the producer and the consumer are
> authenticated, can the consumer know who sent the message?

See: http://www.rabbitmq.com/validated-user-id.html

Cheers, Simon

-- 
Simon MacMullen
RabbitMQ, Pivotal