From ef1fbc16c604f22307251ed1c2ccfa8debad1762 Mon Sep 17 00:00:00 2001 From: Alan Conway Date: Tue, 6 Dec 2011 15:56:40 +0000 Subject: QPID-3652: Fix cluster authentication. Only allow brokers that authenticate as the cluster-username to join a cluster. New broker first connects to a cluster broker authenticates as the cluster-username and sends its CPG member ID to the qpid.cluster-credentials exchange. The cluster broker that subsequently acts as updater verifies that the credentials are valid before connecting to give the update. NOTE 1: If you are using an ACL, the cluster-username must be allowed to publish to the qpid.cluster-credentials exchange. E.g. in your ACL file: acl allow foo@QPID publish exchange name=qpid.cluster-credentials NOTE 2: This changes the cluster initialization protocol, you will need to restart the cluster with all new version brokers. git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1210989 13f79535-47bb-0310-9956-ffa450edef68 --- cpp/src/qpid/UrlArray.h | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 cpp/src/qpid/UrlArray.h (limited to 'cpp/src/qpid/UrlArray.h') diff --git a/cpp/src/qpid/UrlArray.h b/cpp/src/qpid/UrlArray.h new file mode 100644 index 0000000000..c82d5639f1 --- /dev/null +++ b/cpp/src/qpid/UrlArray.h @@ -0,0 +1,37 @@ +#ifndef QPID_CLUSTER_URLARRAY_H +#define QPID_CLUSTER_URLARRAY_H + +/* + * + * Licensed to the Apache Software Foundation (ASF) under one + * or more contributor license agreements. See the NOTICE file + * distributed with this work for additional information + * regarding copyright ownership. The ASF licenses this file + * to you under the Apache License, Version 2.0 (the + * "License"); you may not use this file except in compliance + * with the License. You may obtain a copy of the License at + * + * http://www.apache.org/licenses/LICENSE-2.0 + * + * Unless required by applicable law or agreed to in writing, + * software distributed under the License is distributed on an + * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + * KIND, either express or implied. See the License for the + * specific language governing permissions and limitations + * under the License. + * + */ + +#include "qpid/framing/Array.h" +#include "qpid/framing/FieldValue.h" +#include "qpid/Url.h" +#include + +namespace qpid { + +/** @file Functions to encode/decode an array of URLs. */ +std::vector urlArrayToVector(const framing::Array& array); +framing::Array vectorToUrlArray(const std::vector& urls); +} // namespace qpid + +#endif /*!QPID_CLUSTER_URLARRAY_H*/ -- cgit v1.2.1