Uploaded image for project: 'Java Couchbase JVM Core'
  1. Java Couchbase JVM Core
  2. JVMCBC-890

Only negotiate PLAIN when using TLS with PasswordAuthenticator

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 2.0.10
    • None
    • None
    • None
    • 1

    Description

      When TLS is enabled, only PLAIN should be negotiated. There are multiple reasons why this is a good idea:

      • We are on a secure connection already, SCRAM is not needed
      • Less roundtrips/requests to send over SCRAM
      • Always works with LDAP out of the box

       

      (Description copied from Michael Nitschinger's commit summary)

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. CXXCBC-296 PLAIN auth mechanism isn't used for TLS connections

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. JDCP-224 When TLS is enabled, always use SASL mechanism "PLAIN"

          • Major - Major loss of function.
          • Resolved
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              daschl Michael Nitschinger
              daschl Michael Nitschinger
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty