diff options
| author | Michael Goulish <mgoulish@apache.org> | 2010-12-07 14:56:22 +0000 |
|---|---|---|
| committer | Michael Goulish <mgoulish@apache.org> | 2010-12-07 14:56:22 +0000 |
| commit | e037bb9b9f01cd75be022591c30848df80e54f0b (patch) | |
| tree | 093adbc122b53ed185389d0995f3ee9d5469876b /cpp | |
| parent | 63ef119cee2824a81ab178e20bf6daf780e6e6ed (diff) | |
| download | qpid-python-e037bb9b9f01cd75be022591c30848df80e54f0b.tar.gz | |
Comment explaining the nodict flag.
git-svn-id: https://svn.apache.org/repos/asf/qpid/trunk/qpid@1043073 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'cpp')
| -rw-r--r-- | cpp/src/qpid/broker/SaslAuthenticator.cpp | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/cpp/src/qpid/broker/SaslAuthenticator.cpp b/cpp/src/qpid/broker/SaslAuthenticator.cpp index 6e78446334..acdb4934d4 100644 --- a/cpp/src/qpid/broker/SaslAuthenticator.cpp +++ b/cpp/src/qpid/broker/SaslAuthenticator.cpp @@ -294,6 +294,14 @@ void CyrusAuthenticator::init() secprops.property_names = 0; secprops.property_values = 0; secprops.security_flags = 0; /* or SASL_SEC_NOANONYMOUS etc as appropriate */ + /* + * The nodict flag restricts SASL authentication mechanisms + * to those that are not susceptible to dictionary attacks. + * They are: + * SRP + * PASSDSS-3DES-1 + * EXTERNAL + */ if (external.nodict) secprops.security_flags |= SASL_SEC_NODICTIONARY; int result = sasl_setprop(sasl_conn, SASL_SEC_PROPS, &secprops); if (result != SASL_OK) { |