[ https://issues.apache.org/jira/browse/ARTEMIS-3106?focusedWorklogId=582507&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-582507 ]
ASF GitHub Bot logged work on ARTEMIS-3106: ------------------------------------------- Author: ASF GitHub Bot Created on: 14/Apr/21 13:46 Start Date: 14/Apr/21 13:46 Worklog Time Spent: 10m Work Description: laeubi commented on pull request #3543: URL: https://github.com/apache/activemq-artemis/pull/3543#issuecomment-819530712 > @gemmellr can you pretend you never saw this PR? I don't know what happened... sorry about that... You should better make ASF Github / Jira bot more silent then as it sends out a mail for every comment here :-D -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org Issue Time Tracking ------------------- Worklog Id: (was: 582507) Time Spent: 23h 10m (was: 23h) > Support for SASL-SCRAM > ---------------------- > > Key: ARTEMIS-3106 > URL: https://issues.apache.org/jira/browse/ARTEMIS-3106 > Project: ActiveMQ Artemis > Issue Type: New Feature > Components: AMQP > Reporter: Christoph Läubrich > Assignee: Gary Tully > Priority: Major > Fix For: 2.18.0 > > Time Spent: 23h 10m > Remaining Estimate: 0h > > With the enhancements in ARTEMIS-33 / [PR > 3432|https://github.com/apache/activemq-artemis/pull/3432] it would be now > possible to plug-in new SASL mechanism. > One popular one is > [SASL-SCRAM|https://en.wikipedia.org/wiki/Salted_Challenge_Response_Authentication_Mechanism] > because it allows channelbinding together with secure storage of > user-credential. > I have created an [implementation of this for Artemis > AMQP|https://github.com/laeubi/scram-sasl/tree/artemis/artemis] based on the > [SCRAM SASL authentication for Java|https://github.com/ogrebgr/scram-sasl] > code with some enhancements/cleanups to the original. > As the source is already Apache licensed I'd like to propose to include this > in the Artemis code-base. This would greatly enhance the interoperability > with other implementations e.g. Apache QPID. -- This message was sent by Atlassian Jira (v8.3.4#803005)