Adding several groups into vhost_access_query

[Raul Kaubi]

Hi

How can I add two groups into vhost_access_query, I have tried several was to achieve that, but no luck.

I have managed to get working one group, but not two.

For example, I have tried:

1. {vhost_access_query, {in_group, "group1", "group2"}}, 

2. {vhost_access_query, {in_group, "group1, group2"}}, 

3. {vhost_access_query, {in_group, "group1"}, {in_group, "group2"}}, 

Thanks in advance.

[Michael Klishin]

Perhaps use an OR clause?

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-user...@googlegroups.com.
To post to this group, send email to rabbitm...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Raul Kaubi]

Good idea, but how is the syntax then, I have tried:

1. {vhost_access_query, {in_group, "group1" OR "group2"}}, 

2. {vhost_access_query, {in_group, "group1 OR group2"}}

3. {vhost_access_query, {in_group, "group1"} OR {in_group, "group2"}}, 

Options 1 and 3 the service won't start. Option 2, service starts, but won't be able to see queues or exchanges.. (with one group added, I saw everything in management plugin..)

Raul

2016-10-14 11:25 GMT+03:00 Michael Klishin <mkli...@pivotal.io>:

Perhaps use an OR clause?

On 14 Oct 2016, at 14:55, Raul Kaubi <raul...@gmail.com> wrote:

Hi

How can I add two groups into vhost_access_query, I have tried several was to achieve that, but no luck.

I have managed to get working one group, but not two.

For example, I have tried:

1. {vhost_access_query, {in_group, "group1", "group2"}}, 

2. {vhost_access_query, {in_group, "group1, group2"}}, 

3. {vhost_access_query, {in_group, "group1"}, {in_group, "group2"}}, 

Thanks in advance.

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.

To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-users+unsubscribe@googlegroups.com.
To post to this group, send email to rabbitmq-users@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to a topic in the Google Groups "rabbitmq-users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/rabbitmq-users/MCZ2gnfOdL4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to rabbitmq-users+unsubscribe@googlegroups.com.
To post to this group, send email to rabbitmq-users@googlegroups.com.

[Raul Kaubi]

Good idea, but how is the syntax then, I have tried:

1. {vhost_access_query, {in_group, "group1" OR "group2"}}, 

2. {vhost_access_query, {in_group, "group1 OR group2"}}

3. {vhost_access_query, {in_group, "group1"} OR {in_group, "group2"}}, 

Options 1 and 3 the service won't start. Option 2, service starts, but won't be able to see queues or exchanges.. (with one group added, I saw everything in management plugin..)

Raul

[Raul Kaubi]

I also have tried this, but no luck.

4. {vhost_access_query, {'OR', [ {in_group, "group1"}, {in_group, "group2"} ] } }, 

[Michael Klishin]

Please search http://www.rabbitmq.com/ldap.html for "nested groups". Your OR query syntax seems to be OK.

To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-users+unsubscribe@googlegroups.com.
To post to this group, send email to rabbitmq-users@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

MK

Staff Software Engineer, Pivotal/RabbitMQ

[Raul Kaubi]

Ok, I managed to get this to work, finally..:)

P4 basically is correct, but you have to use 'or' not 'OR'. So it's case sensitive.

So correct is:

4. {vhost_access_query, {'or', [ {in_group, "group1"}, {in_group, "group2"} ] } }, 

I also tried in_group_nested, but I could not get this to work, logs says unrecognised query (Capital 'OR' also said in logs, that it is unrecognized query etc..)

I made a group in Active Directory called "rabbitmq_vhost_access", where I added two groups, "group1", "group2", so I use this "rabbitmq_vhost_access" group as a vhost_access_query group and in permission and tags I use group1 and group2. I did managed to log in, but didn't see the queues nor the exchanges.

Certain syntax was:

{vhost_access_query, {in_group_nested, "..rabbitmq_vhost_access_group..", "member", single_level}}, (default subtree also didn't work for me)

Raul