Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-7537

Elytron ExternalSaslServerFactory.createSaslServer should return null for unsupported policies

XMLWordPrintable

    • Hide 
      // configure SASL policy using mechanism properties in a way, that the EXTERNAL mech is not supported
props = new HashMap();
props.put(Sasl.POLICY_FORWARD_SECRECY, "true");
// following correctly returns no names (empty array)
factory.getMechanismNames(props);
// following wrongly returns an instantiated ExternalSaslServer instance
factory.createSaslServer("EXTERNAL", "test", "localhost", props, null);
      Show
      // configure SASL policy using mechanism properties in a way, that the EXTERNAL mech is not supported props = new HashMap(); props.put(Sasl.POLICY_FORWARD_SECRECY, " true " ); // following correctly returns no names (empty array) factory.getMechanismNames(props); // following wrongly returns an instantiated ExternalSaslServer instance factory.createSaslServer( "EXTERNAL" , "test" , "localhost" , props, null );

      The ExternalSaslServerFactory.createSaslServer(String, String, String, Map<String, ?>, CallbackHandler) method returns an instance even for properties, for which getMechanismNames() returns empty array of names.

      The ExternalSaslServer instances should only be created if the mechanism is supported for given properties (configuration).

              rhn-support-ivassile Ilia Vassilev
              josef.cacek@gmail.com Josef Cacek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: