diff options
Diffstat (limited to 'cpp/etc/Makefile.am')
| -rw-r--r-- | cpp/etc/Makefile.am | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/cpp/etc/Makefile.am b/cpp/etc/Makefile.am index 1e4db561a7..c91dbcbbad 100644 --- a/cpp/etc/Makefile.am +++ b/cpp/etc/Makefile.am @@ -30,7 +30,30 @@ nobase_sysconf_DATA = \ qpidd.conf if HAVE_SASL +SASL_DB = qpidd.sasldb + nobase_sysconf_DATA += \ $(SASL_CONF) +sasldbdir = $(localstatedir)/lib/qpidd +sasldb_DATA = $(SASL_DB) + +# Setup the default sasldb file with a single user, guest, with an +# obvious password. This user and password are the default for many +# clients. +# +# The realm specified by -u is very important, and QPID is the default +# for the broker so we use it here. The realm is important because it +# defaults to the local hostname of the machine running the +# broker. This may not seem to bad at first glance, but it means that +# the sasldb has to be tailored to each machine that would be running +# a broker, and if the machine ever changed its name the +# authentication would stop working until the sasldb was updated. For +# these reasons we always want the broker to specify a realm where its +# users live, and we want the users to exist in that realm as well. +$(SASL_DB): + echo guest | $(SASL_PASSWD) -c -p -f $(SASL_DB) -u QPID guest + +CLEANFILES=$(SASL_DB) + endif |