Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to connect using SASL ANONYMOUS #250

Closed
dnwe opened this issue Sep 27, 2016 · 0 comments
Closed

Unable to connect using SASL ANONYMOUS #250

dnwe opened this issue Sep 27, 2016 · 0 comments

Comments

@dnwe
Copy link
Contributor

dnwe commented Sep 27, 2016

Currently node-amqp10 supports either the raw AMQP protocol (for non-authenticated connections), or AMQP with a SASL PLAIN security layer (for authenticated connections). It would be helpful to additionally provide a policy for connecting with a SASL ANONYMOUS layer when no credentials are provided.

(I'll submit a PR shortly with an initial proposal)

dnwe added a commit to dnwe/node-amqp10 that referenced this issue Sep 27, 2016
By providing a Sasl object to policy.connect.sasl (but no user+pass in
the address), SASL ANONYMOUS will be used rather than plain AMQP.

Fixes noodlefrenzy#250
dnwe added a commit to dnwe/node-amqp10 that referenced this issue Sep 28, 2016
By providing a Sasl object to policy.connect.sasl (but no user+pass in
the address), SASL ANONYMOUS will be used rather than plain AMQP.

Fixes noodlefrenzy#250
dnwe added a commit to dnwe/node-amqp10 that referenced this issue Sep 28, 2016
By providing a Sasl object to policy.connect.sasl (but no user+pass in
the address), SASL ANONYMOUS will be used rather than plain AMQP.

Fixes noodlefrenzy#250
dnwe added a commit to dnwe/node-amqp10 that referenced this issue Oct 4, 2016
By specifying an explicit Sasl mechanism via
policy.connect.saslMechanism, the user may opt-in to using/not-using a
particular Sasl security layer for AMQP.

Where:
 - **null** means: infer from the other policy settings and value
   supplied to connect (behaviour exactly as we have today, the default
   in policy.js)
 - **NONE** forces you not to attempt any SASL, raw AMQP only - if
   username / password are in the URL, they are ignored.
 - **PLAIN** forces you to try SASL plain - it's a client-side error not
   to have a username and password in the URL
 - **ANONYMOUS** forces you to try SASL anonymous - if username /
   password are in the URL, they are ignored.
 - **ANYTHING_ELSE** throws unsupported mechanism error

Fixes noodlefrenzy#250
dnwe added a commit to dnwe/node-amqp10 that referenced this issue Oct 4, 2016
By specifying an explicit Sasl mechanism via
policy.connect.saslMechanism, the user may opt-in to using/not-using a
particular Sasl security layer for AMQP.

Where:
 - **null** means: infer from the other policy settings and value
   supplied to connect (behaviour exactly as we have today, the default
   in policy.js)
 - **NONE** forces you not to attempt any SASL, raw AMQP only - if
   username / password are in the URL, they are ignored.
 - **PLAIN** forces you to try SASL plain - it's a client-side error not
   to have a username and password in the URL
 - **ANONYMOUS** forces you to try SASL anonymous - if username /
   password are in the URL, they are ignored.
 - **ANYTHING_ELSE** throws unsupported mechanism error

Fixes noodlefrenzy#250
dnwe added a commit to dnwe/node-amqp10 that referenced this issue Oct 4, 2016
By specifying an explicit Sasl mechanism via
policy.connect.saslMechanism, the user may opt-in to using/not-using a
particular Sasl security layer for AMQP.

Where:
 - **null** means: infer from the other policy settings and value
   supplied to connect (behaviour exactly as we have today, the default
   in policy.js)
 - **NONE** forces you not to attempt any SASL, raw AMQP only - if
   username / password are in the URL, they are ignored.
 - **PLAIN** forces you to try SASL plain - it's a client-side error not
   to have a username and password in the URL
 - **ANONYMOUS** forces you to try SASL anonymous - if username /
   password are in the URL, they are ignored.
 - **ANYTHING_ELSE** throws unsupported mechanism error

Fixes noodlefrenzy#250
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant