[
https://issues.apache.org/jira/browse/PROTON-950?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14652352#comment-14652352
]
Gordon Sim commented on PROTON-950:
-----------------------------------
I tried unsuccessfully to do this. It is awkward to get at the sasl object for
a connection when using the reactor. In theory you can do so via the
on_connection_bound method. However even doing so, and setting the new property
to True, I was unable to connect using PLAIN over a non-ssl connection.
Without making any changes, the behaviour also seems to have changed very
recently. Previously when attempting to connect where only PLAIN was offered by
the broker, an error would at least be logged to the effect that 'no worthy
mechs' could be selected, and both sides would end up disconnected. Now there
is no error at all and the reactive examples just hang.
> SASL PLAIN over cleartext should be supported
> ---------------------------------------------
>
> Key: PROTON-950
> URL: https://issues.apache.org/jira/browse/PROTON-950
> Project: Qpid Proton
> Issue Type: Bug
> Components: proton-c
> Affects Versions: 0.10
> Reporter: Ted Ross
> Assignee: Andrew Stitcher
> Priority: Blocker
> Fix For: 0.10
>
>
> In the current 0.10 alpha, if SASL PLAIN is selected, it will only work if
> the connection is encrypted (using SSL). This is a surprising change of
> behavior from earlier versions of Proton and it's arguable that a security
> policy like that should be left to the application using the Proton library.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
