In line 66 of cpp/src/qpid/broker/SemanticState.cpp, the user-id for the connection is extracted and filtered such that the "@domain" portion is removed. Why is this done? Isn't the domain a key part of a user-id?

The reason this is a problem is that when using GSSAPI, the client doesn't know the user id and needs to get it from the SASL security context. When it does, the name includes the domain. If it then puts this user-id into the message-properties, the message is rejected because it doesn't match the filtered name that the broker is comparing to.

It seems like the wrong thing to do to remove the domain portion in the message-properties.

Is there a good reason that this needs to work this way?

Thanks,

-Ted


---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:[email protected]

Reply via email to