[ARTEMIS-1310] Provide GSSAPI (kerberos) SASL mechanism for AMQP

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.3.0
• Component/s: AMQP
• Assignee: Gary Tully
• Reporter: Gary Tully
• Created: 31/Jul/17 10:19
• Updated: 15/Dec/17 14:31
• Resolved: 10/Aug/17 10:32

Description

implement GSSAPI sasl mechanism for AMQP transport allowing kerberos single sign on (authentication) and subsequent authorisation

Doco: https://github.com/apache/activemq-artemis/blob/master/docs/user-manual/en/security.md#kerberos-authentication

Issue Links

• requires: QPIDJMS-303 Add support for SASL GSSAPI Kerberos mechanism
• requires: PROTON-1525 enable configuring the initial remote max frame size limit
• supercedes: ARTEMIS-1264 Client authentication via Kerberos TLS Cipher Suites (RFC 2712)
• links to: GitHub Pull Request #1449
• links to: GitHub Pull Request #1711