Howard Gao created ARTEMIS-2959:
-----------------------------------

             Summary: Validate against cluster user name uniqueness
                 Key: ARTEMIS-2959
                 URL: https://issues.apache.org/jira/browse/ARTEMIS-2959
             Project: ActiveMQ Artemis
          Issue Type: Bug
          Components: Broker
    Affects Versions: 2.15.0
            Reporter: Howard Gao
             Fix For: 2.16.0


The broker has a special cluster user and cluster password and when doing
authentication it always check the cluster user first.
If user configures a cluster user name that is the same as one of it's
normal users, the broker always authenticate that normal user
against the cluster password which is not right and probably failed
authentication as the cluster password usually not the same as
the normal user's password.
To avoid such a case the broker should check the configuration
during startup and if the cluster user name collides with a normal
user name, it should report as an error.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to