[Mini-NDN] [EXT] ERROR: Failed to register prefix (authorization rejected)

[Junxiao Shi]

Hi Nazatul

Is your producer trying to register multiple prefixes simultaneously?
If so, the signed Interests are signed by the same key, and the same
problem occurs.

The solution is implementing https://redmine.named-data.net/issues/2293 in
ndn-cxx.
Please see the contribution guide on how to get your implementation merged
to ndn-cxx.

Yours, Junxiao

On Wed, Aug 19, 2020, 09:23 Nazatul Haque Sultan <
nazatulhaque.sultan at gmail.com> wrote:

> *External Email*
> Hi Junxiao,
>
> Thanks for your reply. I understood from your reply that if more than two
> producers use the same key to sign interests than the mentioned problem
> arises.
>
> However, my topology has only one producer (which publishes multiple
> contents at a regular interval of time). Unfortunately, I am still getting
> that error message. Can you please explain this to me?
>
> Thank you.
>
> Best regards,
> Nazatul
>
> On Wed, Aug 19, 2020 at 6:00 PM Junxiao Shi <shijunxiao at email.arizona.edu>
> wrote:
>
>> Hi Nazatul
>>
>> This is caused by multiple producers trying to register prefixes
>> simultaneously.
>> Prefix registration uses signed Interests. If two signed Interests are
>> signed by the same key but processed out of order, the validator will
>> reject them. See
>> https://redmine.named-data.net/issues/2293
>>
>> To solve this issue, give each producer a separate KeyChain by setting
>> distinct values in NDN_CLIENT_PIB and NDN_CLIENT_TPM environment variables,
>> so that they sign the signed Interests with distinct keys.
>> Ideally this logic should be provided by Mini-NDN scripts.
>>
>> Yours, Junxiao
>>
>> On Tue, Aug 18, 2020 at 23:05 Nazatul Haque Sultan via Mini-NDN <
>> mini-ndn at lists.cs.ucla.edu> wrote:
>>
>>> *External Email*
>>> Dear All,
>>>
>>> I was trying to publish contents (videos) using
>>> "ndnputchunks. However, a few times I could see an "*authorization
>>> rejected*" error:
>>>
>>> ERROR: Failed to register prefix '/ndn/a-site/a/XYZ.mp4' (authorization
>>> rejected)
>>>
>>> I have attached a screenshot of it. Can someone please explain this to
>>> me? That will be very helpful.
>>>
>>> Thank you in advance.
>>>
>>> Best Regards,
>>> Nazatul
>>>
>>> _______________________________________________
>>>
>>> Mini-NDN mailing list
>>>
>>> Mini-NDN at lists.cs.ucla.edu
>>>
>>> http://www.lists.cs.ucla.edu/mailman/listinfo/mini-ndn
>>>
>>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/mini-ndn/attachments/20200819/3a22fb80/attachment-0001.html>