summaryrefslogtreecommitdiff
path: root/cpp/etc/Makefile.am
blob: f683459cd497e5e2c5ab4fb1e74f37cc0cc73aaf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
SASL_CONF = sasl2/qpidd.conf

EXTRA_DIST = \
	$(SASL_CONF) \
	qpidd qpidd.conf

nobase_sysconf_DATA = \
	qpidd.conf

if HAVE_SASL
SASL_DB = qpidd.sasldb

nobase_sysconf_DATA += \
	$(SASL_CONF)

sasldbdir = $(localstatedir)/lib/qpidd
sasldb_DATA = $(SASL_DB)

# Setup the default sasldb file with a single user, guest, with an
# obvious password. This user and password are the default for many
# clients.
#
# The realm specified by -u is very important, and QPID is the default
# for the broker so we use it here. The realm is important because it
# defaults to the local hostname of the machine running the
# broker. This may not seem to bad at first glance, but it means that
# the sasldb has to be tailored to each machine that would be running
# a broker, and if the machine ever changed its name the
# authentication would stop working until the sasldb was updated. For
# these reasons we always want the broker to specify a realm where its
# users live, and we want the users to exist in that realm as well.
$(SASL_DB):
	echo guest | /usr/sbin/saslpasswd2 -c -p -f $(SASL_DB) -u QPID guest

CLEANFILES=$(SASL_DB)

endif