You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@qpid.apache.org by "Brandon Pedersen (Commented) (JIRA)" <ji...@apache.org> on 2011/11/11 18:45:51 UTC

[jira] [Commented] (QPID-2305) Remote IP authentication

    [ https://issues.apache.org/jira/browse/QPID-2305?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13148604#comment-13148604 ] 

Brandon Pedersen commented on QPID-2305:
----------------------------------------

I would also love to see this implemented!
                
> Remote IP authentication
> ------------------------
>
>                 Key: QPID-2305
>                 URL: https://issues.apache.org/jira/browse/QPID-2305
>             Project: Qpid
>          Issue Type: New Feature
>          Components: C++ Broker
>            Reporter: Armin Noll
>         Attachments: acldata.cpp, acldata.h, aclmodule.h, connectionhandler.cpp
>
>
> We require a feature that allows to restrict on user level the IP addresses from which a user is allowed to connect.
> Multiple addresses in CIDR notation are possible per user.
> We propose the following solution via rules in the ACL file (see also attached modified source code):
>    acl <permission> {<group-name>|<user-name>|"all"} create connection network=<network>
> where <network> is a comma separated list of addresses nnn.nnn.nnn.nnn[/nn]
> E.g.
> acl allow bob@QPID create connection network=192.168.1.0/24 
> The request has also been reported as service request no 1981258 at Red Hat's support system.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:dev-subscribe@qpid.apache.org