You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@activemq.apache.org by "bhavesh.patel" <bh...@mzero.com> on 2012/11/23 20:59:54 UTC

Apache Apollo Broker Connection to LDAP OVER SSL

Hi 
I want to know if Apache Apollo Broker Connection to LDAP OVER SSL exists .
>From the documents it seems it doesnt exist .
connectionProtocol is accepting blank string for now .Can you please let me
know if there is a way to connect Apollo broker to Authenticate user over
LDAP with SSL.
Please reply
Thanks 



--
View this message in context: http://activemq.2283324.n4.nabble.com/Apache-Apollo-Broker-Connection-to-LDAP-OVER-SSL-tp4659701.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Apache Apollo Broker Connection to LDAP OVER SSL

Posted by "bhavesh.patel" <bh...@mzero.com>.

I did solve this issue by installing certificate in jre/lib/security folder
using  InstallCert . So i am good .
This is the configuration which worked for me , 
{org.apache.activemq.jaas.LDAPLoginModule required
    debug=true
    initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory
   connectionURL="ldaps://10.1.1.176:10636"

    
    connectionUsername="uid=admin,ou=system"
    connectionPassword=secret
    connectionProtocol=ssl
    authentication=simple
    userBase="ou=User,ou=ActiveMQ,ou=system"
    userSearchMatching="(uid={0})"
    userSearchSubtree=true
    roleBase="ou=Group,ou=ActiveMQ,ou=system"
    roleName=cn
    roleSearchMatching="(member=uid={1})"
    roleSearchSubtree=true
    ;
}
I really appreciate your help .
Thanks Again




--
View this message in context: http://activemq.2283324.n4.nabble.com/Apache-Apollo-Broker-Connection-to-LDAP-OVER-SSL-tp4659701p4659761.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Apache Apollo Broker Connection to LDAP OVER SSL

Posted by "bhavesh.patel" <bh...@mzero.com>.

Thanks for your promt response 
I am getting this error ,i know its certificate issue .where can i added the
certificate 
Please let me know thanks 

ERROR | javax.naming.CommunicationException: simple bind failed:
10.1.1.176:1063
6 [Root exception is javax.net.ssl.SSLHandshakeException:
sun.security.validator
.ValidatorException: PKIX path building failed:
sun.security.provider.certpath.S
unCertPathBuilderException: unable to find valid certification path to
requested
 target]




--
View this message in context: http://activemq.2283324.n4.nabble.com/Apache-Apollo-Broker-Connection-to-LDAP-OVER-SSL-tp4659701p4659752.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Apache Apollo Broker Connection to LDAP OVER SSL

Posted by Hiram Chirino <hi...@hiramchirino.com>.

Hi,

Try using a login module configuration similar to:

 org.apache.activemq.jaas.LDAPLoginModule required
       debug=true
       initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory
       connectionURL="ldap://ldap.acme.com:389"
connectionUsername="cn=mqbroker,ou=Services,dc=acme,dc=com"
       connectionPassword=password
       connectionProtocol=ssl
       authentication=simple
       userBase="ou=User,ou=ActiveMQ,ou=systems,dc=acme,dc=com"
       userRoleName=dummyUserRoleName
       userSearchMatching="(uid={0})"
       userSearchSubtree=false
       roleBase="ou=Group,ou=ActiveMQ,ou=systems,dc=acme,dc=com"
       roleName=cn
       roleSearchMatching="(member:=uid={1})"
       roleSearchSubtree=true
       ;

Please note that the LDAPLoginModule
adds org.apache.activemq.jaas.UserPrincipal and
org.apache.activemq.jaas.GroupPrincipal objects to the subject.  You will
need to configure the authorization rules in apollo.xml appropriately.


On Fri, Nov 23, 2012 at 2:59 PM, bhavesh.patel <bh...@mzero.com>wrote:

> Hi
> I want to know if Apache Apollo Broker Connection to LDAP OVER SSL exists .
> From the documents it seems it doesnt exist .
> connectionProtocol is accepting blank string for now .Can you please let me
> know if there is a way to connect Apollo broker to Authenticate user over
> LDAP with SSL.
> Please reply
> Thanks
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/Apache-Apollo-Broker-Connection-to-LDAP-OVER-SSL-tp4659701.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>



-- 

**

*Hiram Chirino*

*Engineering | Red Hat, Inc.*

*hchirino@redhat.com <hc...@redhat.com> | fusesource.com | redhat.com*

*skype: hiramchirino | twitter: @hiramchirino<http://twitter.com/hiramchirino>
*

*blog: Hiram Chirino's Bit Mojo <http://hiramchirino.com/blog/>*