You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Robbie Gemmell (JIRA)" <ji...@apache.org> on 2017/10/13 16:53:00 UTC
[jira] [Assigned] (QPIDJMS-335) SCRAM-SHA mechanism impls
erroneously escape "=" and "," in the password during processing
[ https://issues.apache.org/jira/browse/QPIDJMS-335?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robbie Gemmell reassigned QPIDJMS-335:
--------------------------------------
Assignee: Robbie Gemmell
> SCRAM-SHA mechanism impls erroneously escape "=" and "," in the password during processing
> ------------------------------------------------------------------------------------------
>
> Key: QPIDJMS-335
> URL: https://issues.apache.org/jira/browse/QPIDJMS-335
> Project: Qpid JMS
> Issue Type: Bug
> Components: qpid-jms-client
> Affects Versions: 0.26.0
> Reporter: Robbie Gemmell
> Assignee: Robbie Gemmell
> Fix For: 0.27.0
>
>
> Per discussion on http://mail-archives.apache.org/mod_mbox/qpid-users/201710.mbox/%3C1507290028737-0.post%40n2.nabble.com%3E the client is erroneously escaping "=" and "," during password handling, whereas the SCRAM mechanisms only require this for the username and some other cases, causing authentication to fail when they are present as the wrong value is used to compute the details sent to the server.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@qpid.apache.org
For additional commands, e-mail: dev-help@qpid.apache.org