[ARTEMIS-2971] outgoing 'server-connection' doesnt support ANONYMOUS or EXTERNAL SASL mechanisms

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.16.0
• Fix Version/s: 2.17.0
• Assignee: Clebert Suconic
• Reporter: Robbie Gemmell
• Created: 30/Oct/20 12:42
• Updated: 05/Nov/20 16:47
• Resolved: 05/Nov/20 16:41

Description

The broker supports using ANONYMOUS and EXTERNAL (and PLAIN) SASL mechanisms for connecting AMQP clients to the broker. However, it doesnt support either for the outgoing 'server-connection' feature to have the broker establish connections to other servers. This means an Artemis broker may be unable to connect to another Artemis broker using this feature, depending on its configuration.

The broker currently only supports using PLAIN if a user+pass is supplied for the outgoing connection, or using a raw AMQP (no SASL) connection if no user+pass is supplied. This means the broker cant connect to a server unless it either offers PLAIN, or accepts bare AMQP without SASL auth (which some dont, e.g I think ActiveMQ 5 by default at least).

 

EXTERNAL is going to be fairly desirable for such use cases. Using SASL ANONYMOUS for connections without user+pass/EXTERNAL woud be a more typical default, but it should at least be supported if not the default.

Issue Links

• relates to: ARTEMIS-2937 AMQP Server Connectivity
• links to: GitHub Pull Request #3330