From ebfd9ff053b04ab379acfc0fefedee5a31b6d8a5 Mon Sep 17 00:00:00 2001 From: "Stephen D. Huston" Date: Fri, 21 Oct 2011 01:19:00 +0000 Subject: Undo bad merge from trunk - merged at wrong level. git-svn-id: https://svn.apache.org/repos/asf/qpid/branches/QPID-2519@1187150 13f79535-47bb-0310-9956-ffa450edef68 --- cpp/etc/Makefile.am | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) (limited to 'cpp/etc/Makefile.am') diff --git a/cpp/etc/Makefile.am b/cpp/etc/Makefile.am index 1e4db561a7..c91dbcbbad 100644 --- a/cpp/etc/Makefile.am +++ b/cpp/etc/Makefile.am @@ -30,7 +30,30 @@ nobase_sysconf_DATA = \ qpidd.conf if HAVE_SASL +SASL_DB = qpidd.sasldb + nobase_sysconf_DATA += \ $(SASL_CONF) +sasldbdir = $(localstatedir)/lib/qpidd +sasldb_DATA = $(SASL_DB) + +# Setup the default sasldb file with a single user, guest, with an +# obvious password. This user and password are the default for many +# clients. +# +# The realm specified by -u is very important, and QPID is the default +# for the broker so we use it here. The realm is important because it +# defaults to the local hostname of the machine running the +# broker. This may not seem to bad at first glance, but it means that +# the sasldb has to be tailored to each machine that would be running +# a broker, and if the machine ever changed its name the +# authentication would stop working until the sasldb was updated. For +# these reasons we always want the broker to specify a realm where its +# users live, and we want the users to exist in that realm as well. +$(SASL_DB): + echo guest | $(SASL_PASSWD) -c -p -f $(SASL_DB) -u QPID guest + +CLEANFILES=$(SASL_DB) + endif -- cgit v1.2.1