Robbie Gemmell created QPIDJMS-335:
--------------------------------------
Summary: SCRAM-SHA mechanism impls erroneously escape "=" and ","
in the password during processing
Key: QPIDJMS-335
URL: https://issues.apache.org/jira/browse/QPIDJMS-335
Project: Qpid JMS
Issue Type: Bug
Components: qpid-jms-client
Affects Versions: 0.26.0
Reporter: Robbie Gemmell
Per discussion on
http://mail-archives.apache.org/mod_mbox/qpid-users/201710.mbox/%3C1507290028737-0.post%40n2.nabble.com%3E
the client is erroneously escaping "=" and "," during password handling,
whereas the SCRAM mechanisms only require this for the username and some other
cases, causing authentication to fail when they are present as the wrong value
is used to compute the details sent to the server.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
