You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@activemq.apache.org by craig w <co...@gmail.com> on 2013/05/28 19:33:33 UTC
Apply login module to certain channels
Is it possible to configure a login module such that it only affects
certain destinations (topics/queues)? For some destinations I'd like to
require username/password, some others I'd like to require client
certificates.
Meanwhile I have some other channels that don't need username/password auth
or client certificates at all.
Re: Apply login module to certain channels
Posted by craig w <co...@gmail.com>.
Sorry for the confusion, but I'm using Apollo (I didn't realize it was the
same email list as AMQ). Your suggestion looks like it might be promising
however the page you linked to has this error in the "Authorization"
section:
Error formatting macro: snippet: java.lang.IndexOutOfBoundsException:
Index: 20, Size: 20
So I can't see the code snippet. Also the link to the JASS broker xml file
(in the Authorization section as well) isn't working either.
I'll keep digging around, anonymous access might be the ticket...I just
have to see if Apollo has something similar.
On Wed, May 29, 2013 at 11:33 AM, Dejan Bosanac <de...@nighttale.net> wrote:
> Hi,
>
> take a look at "anonymous access"
>
> http://activemq.apache.org/security.html#Security-Anonymousaccess
>
> After setting it up, you need to define authorisation roles as well, to
> define which destination can be accessed by anonymous users/groups.
>
>
> Regards
> --
> Dejan Bosanac
> ----------------------
> Red Hat, Inc.
> FuseSource is now part of Red Hat
> dbosanac@redhat.com
> Twitter: @dejanb
> Blog: http://sensatic.net
> ActiveMQ in Action: http://www.manning.com/snyder/
>
>
> On Tue, May 28, 2013 at 7:33 PM, craig w <co...@gmail.com> wrote:
>
> > Is it possible to configure a login module such that it only affects
> > certain destinations (topics/queues)? For some destinations I'd like to
> > require username/password, some others I'd like to require client
> > certificates.
> >
> > Meanwhile I have some other channels that don't need username/password
> auth
> > or client certificates at all.
> >
>
Re: Apply login module to certain channels
Posted by Dejan Bosanac <de...@nighttale.net>.
Hi,
take a look at "anonymous access"
http://activemq.apache.org/security.html#Security-Anonymousaccess
After setting it up, you need to define authorisation roles as well, to
define which destination can be accessed by anonymous users/groups.
Regards
--
Dejan Bosanac
----------------------
Red Hat, Inc.
FuseSource is now part of Red Hat
dbosanac@redhat.com
Twitter: @dejanb
Blog: http://sensatic.net
ActiveMQ in Action: http://www.manning.com/snyder/
On Tue, May 28, 2013 at 7:33 PM, craig w <co...@gmail.com> wrote:
> Is it possible to configure a login module such that it only affects
> certain destinations (topics/queues)? For some destinations I'd like to
> require username/password, some others I'd like to require client
> certificates.
>
> Meanwhile I have some other channels that don't need username/password auth
> or client certificates at all.
>