luoxiner opened a new pull request, #2176:
URL: https://github.com/apache/zookeeper/pull/2176

   Currently If a non-existent username is currently used along with the 
password of the last successfully logged-in user, this non-existent user can 
successfully log in. This issue occurs because the SaslServerCallbackHandler 
does not clear the information of the previously successfully logged-in user 
when the username does not exist. This Pull Request resolves this issue.
   
   Assoiated jira issue: 
[https://issues.apache.org/jira/projects/ZOOKEEPER/issues/ZOOKEEPER-4839?filter=recentlyviewed&orderby=created+DESC%2C+lastViewed+DESC](url)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to