[ARTEMIS-2344] [AMQP] Broker does not send security errors for unauthorized anonymous sasl

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.8.0, 2.8.1
• Fix Version/s: 2.9.0
• Component/s: AMQP
• Assignee: Unassigned
• Reporter: Domenico Francesco Bruscino
• Created: 17/May/19 05:32
• Updated: 24/Jul/19 18:43
• Resolved: 30/May/19 18:25

Description

When user attempts unauthorized anonymous sasl, using AMQP protocol, the broker can return an internal error ("amqp:internal-error") instead of the security error ("amqp:unauthorized-access") that is expected in these cases.

 

Source code to reproduce the issue using test testNoUserOrPasswordWithoutSaslRestrictions:

https://github.com/brusdev/activemq-artemis/blob/amqp_security_error/tests/integration-tests/src/test/java/org/apache/activemq/artemis/tests/integration/amqp/JMSConnectionWithSecurityTest.java

Issue Links

• relates to: ARTEMIS-2431 [AMQP] Broker does not send security errors for unauthorized anonymous sasl with pipelined open
• links to: GitHub Pull Request #2671
• links to: GitHub Pull Request #2671