Uploaded image for project: 'A-MQ Broker'
  1. A-MQ Broker
  2. ENTMQBR-893

Masking of password does not work with login.config

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: AMQ 7.0.3.GA
    • Fix Version/s: None
    • Component/s: broker-core
    • Labels:
    • Target Release:
    • Sprint:
      AMQ Broker 1836
    • Affects:
      Documentation (Ref Guide, User Guide, etc.), Release Notes
    • Release Notes Text:
      You can now mask passwords in the JAAS configuration file login.config. Previously, password masking was not supported for login.config, which meant that the passwords in the file were stored in plain text.
    • Release Notes Docs Status:
      Documented as Feature Request

      Description

      User Story:
      As an operator, I have configured the broker to use our existing LDAP infrastructure for authentication and authorization, but the password for LDAP is in plain text. I need a way to mask this passwords per my company's policy that no passwords should be in plain text.

      Masking of a password does not work with login.config, I tested the configuration by masking LDAP password and it failed with Invalid Credentials

      When using mask password

      20:27:46,771 DEBUG [org.apache.activemq.artemis.spi.core.security.jaas.LDAPLoginModule] Create the LDAP initial context.
      		 
      20:27:47,040 ERROR [org.apache.activemq.artemis.core.server] javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]

      Without mask

      20:35:30,977 DEBUG [org.apache.activemq.artemis.spi.core.security.jaas.LDAPLoginModule] Create the LDAP initial context.
      		 
      20:35:31,477 DEBUG [org.apache.activemq.artemis.spi.core.security.jaas.LDAPLoginModule] Get the user DN.
      		 
      20:35:31,477 DEBUG [org.apache.activemq.artemis.spi.core.security.jaas.LDAPLoginModule] Looking for the user in LDAP with

        Gliffy Diagrams

          Attachments

          1. broker.xml
            10 kB
          2. login.config
            2 kB
          3. python_output
            5 kB
          4. qpid_jms_output
            5 kB
          5. rhea_output
            3 kB

            Issue Links

            is duplicated by

            Bug - A problem which impairs or prevents the functions of the product. ENTMQBR-1338 Support masked passwords in bootstrap.xml and login.config

            • Major - A request that should be considered seriously but is not a show stopper.
            • Done
            is related to

            Task - A task that needs to be done. ENTMQBR-1494 Document support of masked passwords in login.config

            • Major - A request that should be considered seriously but is not a show stopper.
            • Done

            ARTEMIS-1600 Loading...

            relates to

            Enhancement - An enhancement or refactoring of existing functionality ENTMQBR-908 Support masked passwords in bootstrap.xml

            • Major - A request that should be considered seriously but is not a show stopper.
            • Done

              Activity

                People

                • Assignee:
                  jbertram Justin Bertram
                  Reporter:
                  rhn-support-shsingh shailendra singh
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  4 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Time Tracking

                    Estimated:
                    Original Estimate - 2 days
                    2d
                    Remaining:
                    Remaining Estimate - 2 days
                    2d
                    Logged:
                    Time Spent - Not Specified
                    Not Specified