Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-61174

SCRAM SASL AUTH returns invalid iterator value for incorrect credentials

    XMLWordPrintable

Details

    • Triaged
    • 0
    • Yes
    • March-June 24

    Description

      I have an application which uses SCRAM SHA 512 for SASL AUTH and is sending invalid credentials.

      Against server 7.1 I see that the server responds with SASL CONTINUE and the SASL STEP then fails with an error from the server.

      Against server 7.6 I see that the server responds with SASL CONTINUE but with an invalid iterator value that my scram library is rejecting.

      Is this change intentional? I've attached 2 packets caps illustrating this.

      Attachments

        Issue Links

          relates to

          Bug - A problem which impairs or prevents the functions of the product. GOCBC-1615 connecting to CBS 7.6 with non TLS bad credentials doesn't return ErrAuthenticationFailure

          • Major - Major loss of function.
          • Closed
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              charles.dixon Charles Dixon
              charles.dixon Charles Dixon
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty