[QPID-3522] SASL EXTERNAL mechanism no longer works

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.13
• Fix Version/s: 0.13
• Component/s: C++ Broker
• Assignee: Gordon Sim
• Reporter: Gordon Sim
• Created: 05/Oct/11 13:15
• Updated: 29/Jul/13 18:53
• Resolved: 12/Oct/11 06:30

Description

Seems to be as a result of QPID-3393 (i.e. regression since 0.12) which was a fix for CRAM-MD5. From a simplistic point of view it seems like the CRAM-MD5 mechanism requires an empty response string to be treated as null, whereas for the EXTERNAL mechanism an empty response should be treated as a zero length string. It may be though that there is more to this than that.