[jira] [Updated] (ARTEMIS-2959) Validate against cluster user name uniqueness

["Clebert Suconic (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ARTEMIS-2959?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Clebert Suconic updated ARTEMIS-2959:
-------------------------------------
    Fix Version/s:     (was: 2.16.0)
                   2.17.0

> Validate against cluster user name uniqueness
> ---------------------------------------------
>
>                 Key: ARTEMIS-2959
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-2959
>             Project: ActiveMQ Artemis
>          Issue Type: Bug
>          Components: Broker
>    Affects Versions: 2.15.0
>            Reporter: Howard Gao
>            Priority: Minor
>             Fix For: 2.17.0
>
>
> The broker has a special cluster user and cluster password and when doing
> authentication it always check the cluster user first.
> If user configures a cluster user name that is the same as one of it's
> normal users, the broker always authenticate that normal user
> against the cluster password which is not right and probably failed
> authentication as the cluster password usually not the same as
> the normal user's password.
> To avoid such a case the broker should check the configuration
> during startup and if the cluster user name collides with a normal
> user name, it should report as an error.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)