[PROTON-334] SASL Implementation for Proton C

• Type: Wish
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: proton-0.10
• Component/s: proton-c
• Assignee: Andrew Stitcher
• Reporter: Ted Ross
• Created: 11/Jun/13 19:13
• Updated: 19/Jun/20 10:53
• Resolved: 24/May/16 20:30

Description

It would be desirable to have the ability to use a plug-in module for SASL in Proton. The following implementations could then be developed:

1) A portable stand-alone plugin that does ANONYMOUS, PLAIN, and EXTERNAL
2) A Cyrus-Sasl based plugin for Linux
3) A Windows plugin

Issue Links

• is related to: PROTON-923 [SASL] PN_TRANSPORT_ERROR event not raised
• is related to: PROTON-859 cyrus sasl not compatible with pre 2.1.24 versions
• is related to: PROTON-868 Make Pipelined ANONYMOUS authentication work with fallback SASL implementation
• is related to: PROTON-877 proton-c sasl client hangs on server pipeline
• is related to: PROTON-879 null initial response makes cyrus challenge when it probably shouldn't
• is related to: PROTON-929 [SASL] If both client and server specify ANONYMOUS mech connection setup does not complete
• is related to: PROTON-152 SASL architecture does not support security layers
• is related to: PROTON-332 SASL module needs access to the SSL module
• relates to: PROTON-1055 Username sent twice during SASL AUTH

Sub-Tasks

• Implement SASL external with TLS client authentication: Closed
• Enable PLAIN SASL mech iff connection is encrypted: Closed
• Tests for new SASL features and mechanisms: Closed
• Implement SASL security layer: Closed