Installation guide - Use non-guest account with RabbitMQ

Bug #1405183 reported by Matt Kassawara
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
openstack-manuals
Fix Released
Medium
Matt Kassawara

Bug Description

The installation guide configures services to use the RabbitMQ 'guest' account. However, RabbitMQ version 3.3 or newer limits access by the 'guest' account to the server that runs RabbitMQ [1]. This limitation prevents access by services running on network and compute nodes. Most distributions supported by the installation guide for Juno currently include RabbitMQ versions older than 3.3 and therefore not impacted by this issue. However, distributions can update package versions at any time and this issue currently impacts anyone using packages directly from RabbitMQ.

One solution involves editing the RabbitMQ configuration file to enable remote access by the 'guest' account. However, testing this solution revealed that older versions of RabbitMQ don't understand the options and use different names for the configuration file. Furthermore, RabbitMQ doesn't make obtaining the version number particularly easy. A more ideal solution probably involves adding a non-guest account (e.g., 'openstack') to RabbitMQ and configuring services to use it.

[1] https://www.rabbitmq.com/blog/2014/04/02/breaking-things-with-rabbitmq-3-3/

Revision history for this message
Anthony Veiga (anthony-veiga) wrote :

Ubuntu 14.10 ships with rabbitmq-server 3.3.5-1 as of December 31, 2014. It would be a good idea to update teh docs directly to support creating an openstack-specific, non-guest user for rabbitmq during the installation process. This would match up with not using the default usernames for any other service installations.

Anne Gentle (annegentle)
Changed in openstack-manuals:
status: New → Confirmed
importance: Undecided → Medium
Revision history for this message
Matt Kassawara (ionosphere80) wrote :

At the time of publication, RabbitMQ didn't require additional configuration to enable the "guest" account except on SUSE variants. The installation guide for Kilo will create a "real" user in RabbitMQ. However, due to an increase in bugs from people either attempting to use the installation guide with an unsupported distribution version (e.g., Ubuntu 14.10) or manually installing upstream RabbitMQ packages, I think we need to implement a temporary workaround in the installation guide for Juno.

Changed in openstack-manuals:
assignee: nobody → Matt Kassawara (ionosphere80)
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-manuals (master)

Reviewed: https://review.openstack.org/157970
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=7b4c49862499984f34e67072bb098df162dd17db
Submitter: Jenkins
Branch: master

commit 7b4c49862499984f34e67072bb098df162dd17db
Author: Chris J Arges <email address hidden>
Date: Fri Feb 20 15:58:55 2015 -0600

    [install-guide] allow guest access for rabbitmq

    For users of RabbitMQ > 3.3.0, non-local guest access is disabled.
    Document this for Ubuntu/Debian now too.

    Partial-Bug: #1405183
    backport: juno
    Co-Authored-By: Matt Kassawara <email address hidden>
    Change-Id: I0697dd5b559a7605891d1522d049c5c9e8bdba67

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to openstack-manuals (stable/juno)

Fix proposed to branch: stable/juno
Review: https://review.openstack.org/159307

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to openstack-manuals (stable/juno)

Reviewed: https://review.openstack.org/159307
Committed: https://git.openstack.org/cgit/openstack/openstack-manuals/commit/?id=f4b8c7519d7bcd7d03316ccd31f7557afb92f0aa
Submitter: Jenkins
Branch: stable/juno

commit f4b8c7519d7bcd7d03316ccd31f7557afb92f0aa
Author: Chris J Arges <email address hidden>
Date: Fri Feb 20 15:58:55 2015 -0600

    [install-guide] allow guest access for rabbitmq

    For users of RabbitMQ > 3.3.0, non-local guest access is disabled.
    Document this for Ubuntu/Debian now too.

    Partial-Bug: #1405183
    backport: juno
    Co-Authored-By: Matt Kassawara <email address hidden>
    Change-Id: I0697dd5b559a7605891d1522d049c5c9e8bdba67
    (cherry picked from commit 7b4c49862499984f34e67072bb098df162dd17db)

tags: added: in-stable-juno
Changed in openstack-manuals:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.