Uploaded image for project: 'Couchbase .NET client library'
  1. Couchbase .NET client library
  2. NCBC-1575

Add configuration override to force Plain SASL

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 2.5.3
    • 2.5.2
    • None
    • None
    • SDK 45: IPv6, HC

    Description

      Raised on behalf of forum post: https://forums.couchbase.com/t/authentication-failure-with-external-user-credentials/14687

      The issue is that SCRAM-SHA1 is not supported with RBAC external authentication and .NET SDK automatically selects most secure transport.

      Suggested solution is to create a configuration property called "forceSaslPlain" that defaults to true and will force the auth mechanism type to Plain if set, we can skip the request to retrieve available authentication mechanisms.

      Would also be good if the server allows a SCRAM based mechanism and fails auth, the log could append " if using LDAP, please set forceSsaslPlain to true".

      Attachments

        Issue Links

          For Gerrit Dashboard: NCBC-1575
          # Subject Branch Project Status CR V

          Activity

            People

              mike.goldsmith Michael Goldsmith
              mike.goldsmith Michael Goldsmith
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty