You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@hbase.apache.org by "Istvan Toth (Jira)" <ji...@apache.org> on 2025/01/14 09:55:00 UTC

[jira] [Updated] (HBASE-29080) Validate negotiated SASL QoP against requested

     [ https://issues.apache.org/jira/browse/HBASE-29080?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Istvan Toth updated HBASE-29080:
--------------------------------
    Summary: Validate negotiated SASL QoP against requested  (was: Validate negotiated SASL QOP against requested)

> Validate negotiated SASL QoP against requested
> ----------------------------------------------
>
>                 Key: HBASE-29080
>                 URL: https://issues.apache.org/jira/browse/HBASE-29080
>             Project: HBase
>          Issue Type: Bug
>          Components: rpc, sasl
>            Reporter: Istvan Toth
>            Assignee: Istvan Toth
>            Priority: Major
>
> We currently do not verify that the negotiatied SASL QOP satisfies the requested QOP.
> Mechanisms that do support QOP are expected to abort negotation if they cannot satisfy the requirements, but mechanisms which do not support QOP will ignore the requested QOP property and successfully negotiate even if non-auth QOP was requested.
> Explicitly checking the negotiated QOP makes sure that no downgrade happens in the communication QOP.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)