Problem with AUTH after switched to 5.2.0

[Thorsten Marx]

Hi,

I switched from 5.1.9 to current maven version 5.2.0. With this version the AUTH Protocoll does not work anymore.
I get the following error message:
java.lang.IllegalArgumentException: JGRP000001: configuration error: the following properties in AUTH are not recognized: {keystore_password=changeit, cert_alias=headless, keystore_path=./src/test/resources/headless.jks, cipher_type=RSA, auth_value=headless, cert_password=changeit}
        at org.jgroups.stack.Configurator.initializeAttrs(Configurator.java:218)
        at org.jgroups.stack.Configurator.createProtocolsAndInitializeAttrs(Configurator.java:126)
        at org.jgroups.stack.Configurator.setupProtocolStack(Configurator.java:65)
        at org.jgroups.stack.Configurator.setupProtocolStack(Configurator.java:55)
        at org.jgroups.stack.ProtocolStack.setup(ProtocolStack.java:434)
        at org.jgroups.JChannel.init(JChannel.java:899)
        at org.jgroups.JChannel.<init>(JChannel.java:123)
        at org.jgroups.JChannel.<init>(JChannel.java:113)


My AUTH config ist the following:
        <AUTH auth_class="org.jgroups.auth.X509Token"
                  auth_value="headless"
                  keystore_path="./src/test/resources/headless.jks"
                  keystore_password="changeit"
                  cert_alias="headless"
                  cert_password="changeit"
                  cipher_type="RSA"/>


The config works find with version 5.1.9.

Any hints?

Kind regards
Thorsten

[Bela Ban]

Hi Thorsten

I don't recommend AUTH anymore, except for adding static lists of IP
addresses allowed to join a cluster, see [1] "problems with AUTH" for
details.
Cheers,

[1] http://www.jgroups.org/manual5/index.html#AUTH

> --
> You received this message because you are subscribed to the Google
> Groups "jgroups-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to jgroups-dev...@googlegroups.com
> <mailto:jgroups-dev...@googlegroups.com>.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jgroups-dev/31eb38ee-02f2-4b9b-9e41-c4efac1dc059n%40googlegroups.com
> <https://groups.google.com/d/msgid/jgroups-dev/31eb38ee-02f2-4b9b-9e41-c4efac1dc059n%40googlegroups.com?utm_medium=email&utm_source=footer>.

--
Bela Ban | http://www.jgroups.org

[Thorsten Marx]

With FixedMembershipToken I get the same error message:

java.lang.IllegalArgumentException: JGRP000001: configuration error: the following properties in AUTH are not recognized: {fixed_members_value=127.0.0.2|127.0.0.1|192.168.192.64, fixed_members_seperator=|}

my config:
<AUTH
                auth_class="org.jgroups.auth.FixedMembershipToken"
                fixed_members_value="127.0.0.2|127.0.0.1|192.168.192.64"
                fixed_members_seperator="|"
        />

[Bela Ban]

Try prefixing the fixedXX attrs with 'auth.'

> <https://groups.google.com/d/msgid/jgroups-dev/31eb38ee-02f2-4b9b-9e41-c4efac1dc059n%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/jgroups-dev/31eb38ee-02f2-4b9b-9e41-c4efac1dc059n%40googlegroups.com?utm_medium=email&utm_source=footer>>.
>
>
> --
> Bela Ban | http://www.jgroups.org <http://www.jgroups.org>

>
> --
> You received this message because you are subscribed to the Google
> Groups "jgroups-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to jgroups-dev...@googlegroups.com
> <mailto:jgroups-dev...@googlegroups.com>.
> To view this discussion on the web visit

> https://groups.google.com/d/msgid/jgroups-dev/1c8196fb-f990-40bf-b099-139cf52cecadn%40googlegroups.com
> <https://groups.google.com/d/msgid/jgroups-dev/1c8196fb-f990-40bf-b099-139cf52cecadn%40googlegroups.com?utm_medium=email&utm_source=footer>.

[Bela Ban]

If this doesn't work, create a JIRA, add the config you're using and
I'll look into this issue

On 14.03.22 10:38, Thorsten Marx wrote:

> <https://groups.google.com/d/msgid/jgroups-dev/31eb38ee-02f2-4b9b-9e41-c4efac1dc059n%40googlegroups.com?utm_medium=email&utm_source=footer
> <https://groups.google.com/d/msgid/jgroups-dev/31eb38ee-02f2-4b9b-9e41-c4efac1dc059n%40googlegroups.com?utm_medium=email&utm_source=footer>>.
>
>
> --
> Bela Ban | http://www.jgroups.org <http://www.jgroups.org>

>
> --
> You received this message because you are subscribed to the Google
> Groups "jgroups-dev" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to jgroups-dev...@googlegroups.com
> <mailto:jgroups-dev...@googlegroups.com>.
> To view this discussion on the web visit

> https://groups.google.com/d/msgid/jgroups-dev/1c8196fb-f990-40bf-b099-139cf52cecadn%40googlegroups.com
> <https://groups.google.com/d/msgid/jgroups-dev/1c8196fb-f990-40bf-b099-139cf52cecadn%40googlegroups.com?utm_medium=email&utm_source=footer>.

[Thorsten Marx]

I opened an issue: https://issues.redhat.com/browse/JGRP-2609

thank you