diff options
| author | Rajith Muditha Attapattu <rajith@apache.org> | 2008-09-25 18:31:49 +0000 |
|---|---|---|
| committer | Rajith Muditha Attapattu <rajith@apache.org> | 2008-09-25 18:31:49 +0000 |
| commit | 5df59dd441c73432f66401bee87f36e339cf4d8a (patch) | |
| tree | fe8b65ba4dfec0335f8efcddc2890ffc81b43444 /java/broker/etc/config.xml | |
| parent | 870a3e7c67f6e16805c83bc742eb4eebd0632f34 (diff) | |
| download | qpid-python-5df59dd441c73432f66401bee87f36e339cf4d8a.tar.gz | |
This is a fix for the problem identified in QPID-943.
If msg-auth is configured as true in config.xml the user_id in message properties is verified against the id used at authentication.
If not an exception with error code 403 is thrown.
git-svn-id: https://svn.apache.org/repos/asf/incubator/qpid/trunk/qpid@699044 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'java/broker/etc/config.xml')
| -rw-r--r-- | java/broker/etc/config.xml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/java/broker/etc/config.xml b/java/broker/etc/config.xml index 80ee039ee5..a36fe57c06 100644 --- a/java/broker/etc/config.xml +++ b/java/broker/etc/config.xml @@ -74,6 +74,9 @@ <access> <class>org.apache.qpid.server.security.access.plugins.AllowAll</class> </access> + + <msg-auth>false</msg-auth> + <jmx> <access>${conf}/jmxremote.access</access> <principal-database>passwordfile</principal-database> |