You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2016/01/08 17:56:39 UTC
[jira] [Commented] (QPID-6917) Make web SASL pluggable in web
management UI
[ https://issues.apache.org/jira/browse/QPID-6917?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15089496#comment-15089496 ]
ASF subversion and git services commented on QPID-6917:
-------------------------------------------------------
Commit 1723762 from orudyy@apache.org in branch 'java/trunk'
[ https://svn.apache.org/r1723762 ]
QPID-6917: Change existing sasl client interfaces to give entire control over authentication procedure to implementation; change existing sasl imlementations to adhere to new interfaces
> Make web SASL pluggable in web management UI
> --------------------------------------------
>
> Key: QPID-6917
> URL: https://issues.apache.org/jira/browse/QPID-6917
> Project: Qpid
> Issue Type: Improvement
> Components: Java Broker
> Reporter: Keith Wall
> Assignee: Keith Wall
> Fix For: qpid-java-6.1
>
> Attachments: 0001-QPID-6917-Make-Web-Management-Console-SASL-mechanism.patch
>
>
> Currently the web management hard codes the sasl mechanisms it knows about with an if/then/else ladder. We want to make the sasl mechanism pluggable. The client will know the sasl mechanisms that the server supports during the initial /sasl request. The client side should try to load the sasl implementation from a well known location URL. If the sasl client mechanism is found the implementation (which will meet an agreed interface - probably based on the Java Sasl Client design), will be used. If the sasl mechanism doesn't exist, the client should fall through to the next mechanism.
> It will be possible to increase the SASL mechanisms supported by a WMC by dropping in a web fragment JAR containing another SASL js implementation.
> We need to decide how the client will chose its preferred mechanism.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org