[QPID-6666] When --auth=no is configured, broker offers ANONYMOUS and PLAIN mechanisms

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.32
• Component/s: C++ Broker
• Assignee: Unassigned
• Reporter: Ted Ross
• Created: 29/Jul/15 19:22
• Updated: 29/Jul/15 19:22

Description

When the auth=no configuration option is in effect (authentication disabled), the broker offers both ANONYMOUS and PLAIN mechanisms over AMQP 0-10 regardless of how SASL is configured outside the broker.
This can cause problems with clients that choose the PLAIN mechanism and go to lengths (prompting, etc.) to get the username and password only to have them ignored by the broker.
I think the broker should only offer ANONYMOUS if authentication is disabled.