Details
-
Bug
-
Resolution: Fixed
-
Major
-
None
-
None
-
None
-
1
Description
When TLS is enabled, only PLAIN should be negotiated. There are multiple reasons why this is a good idea:
- We are on a secure connection already, SCRAM is not needed
- Less roundtrips/requests to send over SCRAM
- Always works with LDAP out of the box
(Description copied from Michael Nitschinger's commit summary)
Attachments
Issue Links
- relates to
-
JDCP-224 When TLS is enabled, always use SASL mechanism "PLAIN"
-
- Resolved
-
For Gerrit Dashboard: JVMCBC-890 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
136333,3 | JVMCBC-890: When TLS is enabled, only negotiate SASL PLAIN | master | couchbase-jvm-clients | Status: MERGED | +2 | +1 |
137241,2 | JVMCBC-890: When TLS is enabled, only negotiate SASL PLAIN | colossus | couchbase-jvm-clients | Status: MERGED | +2 | +1 |