You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Robbie Gemmell (JIRA)" <ji...@apache.org> on 2012/11/27 17:47:59 UTC
[jira] [Commented] (QPID-4476) [Java broker]
SimpleLDAPAuthenticationManager returns different Principal name formats
for sasl vs non-sasl usage
[ https://issues.apache.org/jira/browse/QPID-4476?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13504746#comment-13504746 ]
Robbie Gemmell commented on QPID-4476:
--------------------------------------
Change made in http://svn.apache.org/viewvc?rev=1414257&view=rev
> [Java broker] SimpleLDAPAuthenticationManager returns different Principal name formats for sasl vs non-sasl usage
> -----------------------------------------------------------------------------------------------------------------
>
> Key: QPID-4476
> URL: https://issues.apache.org/jira/browse/QPID-4476
> Project: Qpid
> Issue Type: Bug
> Components: Java Broker
> Affects Versions: 0.18, 0.20
> Reporter: Robbie Gemmell
> Assignee: Robbie Gemmell
> Fix For: 0.21
>
>
> The SimpleLDAPAuthenticationManager returns different Principal name formats for sasl vs non-sasl usage.
> In the sasl case, the PlainSaslServer returns the basic username that was originally provided, but in the non-sasl case the SimpleLDAPAuthenticationManager returns a Principal based on the search context/filter. This leads to inconsistent behaviour between e.g. AMQP and JMX interface authentication, and in the later case means it is not possible to specify the user be included as part of an group.
> The non-sasl behaviour should be updated to be consistent with the sasl behaviour.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org