Authentication backends (LDAP, OAuth) in RabbitMQ - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding LDAP Authentication in RabbitMQ

Which statement correctly describes how RabbitMQ uses LDAP for authentication?

A RabbitMQ stores LDAP user passwords locally and compares them during login.

B RabbitMQ directly queries the LDAP server to verify user credentials during login.

C RabbitMQ uses LDAP only for authorization, not authentication.

D RabbitMQ requires users to authenticate via OAuth before LDAP is checked.

💡 Hint

Think about how LDAP servers are typically used for user verification.

RabbitMQ uses LDAP to authenticate users by querying the LDAP server to check credentials at login time.

💻 Command Output

intermediate

RabbitMQ OAuth Authentication Plugin Output

What is the expected output when enabling the OAuth2 authentication plugin in RabbitMQ and restarting the server?

RabbitMQ

rabbitmq-plugins enable rabbitmq_auth_backend_oauth2
sudo systemctl restart rabbitmq-server
sudo rabbitmqctl status | grep oauth2

A {rabbit,auth_backend_oauth2} is enabled and running

B Error: plugin rabbitmq_auth_backend_oauth2 not found

C OAuth2 plugin enabled but server failed to start

D No output related to oauth2 found

💡 Hint

Check if the plugin is listed as enabled after restart.

Enabling the OAuth2 plugin and restarting RabbitMQ should show the plugin as enabled and running in the status output.

❓ Configuration

advanced

Configuring LDAP Authentication Backend in RabbitMQ

Which configuration snippet correctly sets up RabbitMQ to authenticate users against an LDAP server at ldap.example.com on port 389?

A

auth_backends = rabbit_auth_backend_ldap
ldap.servers = ldap.example.com
ldap.port = 389
ldap.user_dn_pattern = uid=${username},ou=users,dc=example,dc=com

B

auth_backends = [rabbit_auth_backend_ldap]
ldap.server = ldap.example.com
ldap.port = 636
ldap.user_dn_pattern = uid=${username},ou=users,dc=example,dc=com

C

auth_backends.1 = rabbit_auth_backend_ldap
ldap.servers.1 = ldap.example.com
ldap.port = 636
ldap.user_dn_pattern = cn=${username},ou=users,dc=example,dc=com

D

auth_backends.1 = rabbit_auth_backend_ldap
ldap.servers.1 = ldap.example.com
ldap.port = 389
ldap.user_dn_pattern = cn=${username},ou=users,dc=example,dc=com

💡 Hint

Check the correct keys for LDAP server and port, and user DN pattern syntax.

Option D correctly uses the indexed auth_backends key, sets ldap.servers.1, port 389, and the user DN pattern with cn attribute.

❓ Troubleshoot

advanced

Troubleshooting OAuth2 Authentication Failure in RabbitMQ

After configuring OAuth2 authentication in RabbitMQ, users report login failures. Which of the following is the most likely cause?

A LDAP server is down, causing OAuth2 to fail.

B RabbitMQ does not support OAuth2 authentication.

C The OAuth2 token endpoint URL is incorrect or unreachable.

D RabbitMQ requires a local password file for OAuth2 to work.

💡 Hint

Consider what external service OAuth2 depends on.

OAuth2 authentication depends on contacting the token endpoint. If the URL is wrong or unreachable, authentication fails.

✅ Best Practice

expert

Best Practice for Securing RabbitMQ with LDAP and OAuth

Which approach best secures RabbitMQ authentication when using both LDAP and OAuth backends?

A Configure RabbitMQ to use OAuth as primary backend and LDAP as fallback, enabling TLS for both connections.

B Use LDAP only and disable OAuth to reduce complexity.

C Allow anonymous access and rely on network firewall for security.

D Store all user passwords in RabbitMQ and disable external backends.

💡 Hint

Think about layered security and encrypted connections.

Using OAuth as primary and LDAP as fallback with TLS encryption ensures secure, flexible authentication.