Remove incomplete support for authenication at virtualhost level 
-----------------------------------------------------------------

                 Key: QPID-3249
                 URL: https://issues.apache.org/jira/browse/QPID-3249
             Project: Qpid
          Issue Type: Improvement
          Components: Java Broker
    Affects Versions: 0.10
            Reporter: Keith Wall
            Assignee: Keith Wall
            Priority: Minor


In addition to the principal db specified at the broker level, VirtualHostImpl 
tries to support authentication at virtualhost level.  This concept is flawed 
as in Qpid, username and password _must_ be considered, before virtual host.

i.e.

{code}
<virtualhost>
 <name>localhost</name>
 <localhost>
....
   <security>
     <!-- Would need protocol changes to allow this-->
     <authentication>
       <name>passwordfile</name>
       <!-- Currently this can't be used as Vhost isn't specified at connection 
start only connection open -->
       <mechanism>PLAIN</mechanism>
     </authentication>
.....

{code}


The redundant implementation in VirtualHostImpl should be removed.



--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscr...@qpid.apache.org

Reply via email to