[Pulp-list] qpidd "error SASL layer required"

[Brian Bouterse]

Hi Christina, I don't know what component is trying to connect to qpidd,
but that error message should be logged when the server is configured to
require SASL and a client is trying to connect without using SASL. Pulp
workers use SASL by default so it's likely not one of those. Maybe it's a
goferd connection? I'm not sure what the state of SASL support is for
goferd. Maybe it's nodes related?

To investigate more, maybe do these two things. First verify what the qpidd
SASL requirements are. Is SASL configured? Is it required for all
connections? The upstream Qpid docs have pages on all of this. Second,
consider turning up the logging on qpidd and watch for the client IP where
the connection is originating from. You may also find `qpid-printevents`
useful for showing more detailed output for events happening on the broker.

If you find the cause, consider letting the list know if it would be
helpful to others.

-Brian


On Tue, Oct 25, 2016 at 10:36 AM, Christina Plummer <cplummer at gmail.com>
wrote:

> Hello Pulp list,
>
> OSSEC has been picking up on this error appearing in /var/log/messages
> from qpidd:
>
> Oct 25 06:47:11 myserver qpidd: 2016-10-25 06:47:11 [System] error SASL
> layer required!
>
> The errors often come in pairs (2 at the same second), approximately once
> a day, and at various times (though there's a bit of a cluster around
> 3AM).  I haven't been able to correlate them to any scheduled sync tasks
> (all of which I have scheduled between 8PM and 12AM), any particular HTTP
> requests, cron jobs, or anything else occurring in the log.  And searches
> for this particular error on the web came up surprisingly empty.
>
> I'm seeing the messages on both my Pulp 2.9.2 servers - a RHEL7 parent
> node and RHEL6 child node.  My qpidd.conf is empty (all commented), as are
> the [messaging] and [tasks] sections of my server.conf.
>
> As far as I can tell, Pulp is running fine.  But if I do have something
> misconfigured, I'd like to correct it. Is anyone else seeing this or know
> what it means?
>
> Thanks,
> Christina
>
> _______________________________________________
> Pulp-list mailing list
> Pulp-list at redhat.com
> https://www.redhat.com/mailman/listinfo/pulp-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pulp-list/attachments/20161025/961ce56e/attachment.htm>