You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@activemq.apache.org by "crishel.yumul" <cr...@toro.io> on 2016/07/29 02:27:24 UTC

For each user group.properties

Is there any way I can authorize multiple users under the group name
AMQ-users located on my groups.properties.

Here's my groups.properties:

AMQ-admin=admin
AMQ-users=client1,client2

On my authorization plugin i call AMQ-users to authorzied these two users
Here's my authorization plugin:

<authorizationPlugin>
        <map>
          <authorizationMap>
            <authorizationEntries>
              <authorizationEntry topic="${AMQ-users}.some.topic.>"
read="AMQ-users" write="AMQ-users" admin="AMQ-admin,AMQ-users" />
            </authorizationEntries>
          </authorizationMap>
        </map>
</authorizationPlugin>

Any help? or are there any additional configuration?

Regards,
Crishel Yumul



--
View this message in context: http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: For each user group.properties

Posted by Hassen Bennour <be...@gmail.com>.
Hello,

I'm not sure that AMQ can do this dynamically through xml config, may be
someone else can help.



Kind regards.

*BENNOUR HASSEN*

*SOA **Architect **/ **Java **Software Engineer*

2016-08-02 1:38 GMT+02:00 crishel.yumul <cr...@toro.io>:

> Good day!
>
> All I want is for my broker to recognize those 2 users under AMQ-users
> group in group.properties and create a topic name for them, individually.
>
>
> Here’s how I called AMQ-users:
>
> <bean id="ppConfig2"
> class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer”>
>
>         <property name="ignoreUnresolvablePlaceholders" value="true”/>
>
>         <property name="locations”>
>
>             <value>file:${activemq.conf}/groups.properties</value>
>
>         </property>
>
>         <property name="systemPropertiesModeName"
> value="SYSTEM_PROPERTIES_MODE_OVERRIDE" />
>
> </bean>
>
> —————
> Here’s the content of my group.properties
>
> east-admins=eadmin
> east-users=eclient1,eclient2
> …
> …
>
> REQUIRE: *** Now I want those 2 clients to have their own topic name on
> the web console. ***
> —————
>
> And here’s the current config of my authorization:
> <authorizationPlugin>
>        ...
>               <authorizationEntry topic="${east-users}.com.toro.>"
> read="east-users" write="east-users" admin="east-admins,east-users" />
>        …
> </authorizationPlugin>
>
> Thank you for your help :)
>
> Regards,
> Crishel Yumul
> DevOps
> TORO Limited
>
> > On Aug 1, 2016, at 5:47 PM, Hassen Bennour [via ActiveMQ] <
> ml-node+s2283324n4714899h89@n4.nabble.com> wrote:
> >
> > Hello,
> >
> > I'm not sur to understand the problem, can you please resume the whole
> > problem & configuration and what works and what not ?
> >
> > if you want the broker to create destinations at startup before a client
> > start using them you need to configure this like said here
> > http://activemq.apache.org/configure-startup-destinations.html <
> http://activemq.apache.org/configure-startup-destinations.html>
> > by adding your destinations like below you can see them on the web
> console
> >
> > <destinations>
> >
> >       <queue physicalName="FOO.BAR" />
> >
> >       <topic physicalName="SOME.TOPIC" />
> >
> >     </destinations>
> >
> > if you want to see many changes without restarting the broker you can add
> > this very useful plugin
> > http://activemq.apache.org/runtime-configuration.html <
> http://activemq.apache.org/runtime-configuration.html>
> >
> > <plugins>
> > ...
> > <runtimeConfigurationPlugin checkPeriod="1000" />
> > ...
> > </plugins>
> >
> >
> >
> > Kind regards.
> >
> > *BENNOUR HASSEN*
> >
> > *SOA **Architect **/ **Java **Software Engineer*
> >
> > 2016-08-01 10:10 GMT+02:00 crishel.yumul <[hidden email]
> <x-msg://4/user/SendEmail.jtp?type=node&node=4714899&i=0>>:
> >
> > > To the groups.properties..
> > > * AMQ-users=client1,client2
> > > * AMQ-users=“client1”,”client2”
> > > *AMW-users=‘client1’,’client2'
> > >
> > >
> > > I want my authorization to read these 2 clients and create 2 topic
> > > destination on web console. But nothing worked out. Any help?
> > >
> > > Thanks!
> > >
> > > Best regards,
> > > Crishel Yumul
> > > DevOps
> > > TORO Limited
> > >
> > > > On Aug 1, 2016, at 3:34 PM, Hassen Bennour [via ActiveMQ] <
> > > [hidden email]
> <x-msg://4/user/SendEmail.jtp?type=node&node=4714899&i=1>> wrote:
> > > >
> > > > Hello,
> > > > where you done this ?*. I've tried adding (" ") and (' '), but it
> didn't
> > > > worked out. *
> > > >
> > > > You can do this by adding an authorizationEntry for each user.
> > > >
> > > > <authorizationPlugin>
> > > >         <map>
> > > >           <authorizationMap>
> > > >             <authorizationEntries>
> > > >               <authorizationEntry topic="client1.some.topic.>"
> > > read="client1"
> > > > write="client1" admin="AMQ-admin,client1" />
> > > >               <authorizationEntry topic="client2.some.topic.>"
> > > read="client2"
> > > > write="client2" admin="AMQ-admin,client2" />
> > > >             </authorizationEntries>
> > > >           </authorizationMap>
> > > >         </map>
> > > > </authorizationPlugin>
> > > >
> > > >
> > > >
> > > > Kind regards.
> > > >
> > > > *BENNOUR HASSEN*
> > > >
> > > > *SOA **Architect **/ **Java **Software Engineer*
> > > >
> > > > 2016-08-01 3:11 GMT+02:00 crishel.yumul <[hidden email]
> > > <x-msg://2/user/SendEmail.jtp?type=node&node=4714897&i=0
> <x-msg://2/user/SendEmail.jtp?type=node&node=4714897&i=0>>>:
> > > >
> > > > > Thank you, Hassen! :)
> > > > > I've already configured the jaasAuth plugin...
> > > > >
> > > > > Here's my follow-up question:
> > > > > In the group.properties, I have 2 users. Client1 and Client 2.
> Both are
> > > > > configured to have own topic ("client1.some.topic" and
> > > > > "client2.some.topic"). But upon running my broker, my broker
> console
> > > only
> > > > > shows the client2.some.topic.. I've tried adding (" ") and (' '),
> but
> > > it
> > > > > didn't worked out.
> > > > >
> > > > > Now, is there any way I can command my broker to authorize the 2
> users
> > > with
> > > > > their own topic name? So that the web console can display both
> their
> > > topic?
> > > > >
> > > > > Thank you! Hope there will be an answer. It will be greatly
> > > appreciated!
> > > > >
> > > > >
> > > > > Regards,
> > > > > Crishel Yumul
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > View this message in context:
> > > > >
> > >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
> >
> > > <
> > >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
> >
> > > >
> > > > > Sent from the ActiveMQ - User mailing list archive at Nabble.com <
> http://nabble.com/> <
> > > http://nabble.com/ <http://nabble.com/>>.
> > > > >
> > > >
> > > >
> > > > If you reply to this email, your message will be added to the
> discussion
> > > below:
> > > >
> > >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html
> >
> > > <
> > >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html
> >
> > > >
> > > > To unsubscribe from For each user group.properties, click here <
> > > >.
> > > > NAML <
> > >  <applewebdata://AE8807CD-874D-436E-9A63-1E44FDB81454>
> http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml
> <
> http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml
> >
> > > >
> > >
> > >
> > >
> > >
> > > --
> > > View this message in context:
> > >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714898.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714898.html
> >
> > > Sent from the ActiveMQ - User mailing list archive at Nabble.com <
> http://nabble.com/>.
> > >
> >
> >
> > If you reply to this email, your message will be added to the discussion
> below:
> >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714899.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714899.html
> >
> > To unsubscribe from For each user group.properties, click here <
> http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=4714741&code=Y3Jpc2hlbC55dW11bEB0b3JvLmlvfDQ3MTQ3NDF8LTE2NTIyNjIwNjQ=
> >.
> > NAML <
> http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml
> >
>
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714957.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>

Re: For each user group.properties

Posted by "crishel.yumul" <cr...@toro.io>.
Good day!

All I want is for my broker to recognize those 2 users under AMQ-users group in group.properties and create a topic name for them, individually.


Here’s how I called AMQ-users:

<bean id="ppConfig2" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer”>

        <property name="ignoreUnresolvablePlaceholders" value="true”/>

        <property name="locations”>

            <value>file:${activemq.conf}/groups.properties</value>

        </property>

        <property name="systemPropertiesModeName" value="SYSTEM_PROPERTIES_MODE_OVERRIDE" />

</bean>

—————
Here’s the content of my group.properties

east-admins=eadmin
east-users=eclient1,eclient2
…
…

REQUIRE: *** Now I want those 2 clients to have their own topic name on the web console. ***
—————

And here’s the current config of my authorization:
<authorizationPlugin>
       ...
              <authorizationEntry topic="${east-users}.com.toro.>" read="east-users" write="east-users" admin="east-admins,east-users" />
       …
</authorizationPlugin>

Thank you for your help :)

Regards,
Crishel Yumul
DevOps
TORO Limited

> On Aug 1, 2016, at 5:47 PM, Hassen Bennour [via ActiveMQ] <ml...@n4.nabble.com> wrote:
> 
> Hello, 
> 
> I'm not sur to understand the problem, can you please resume the whole 
> problem & configuration and what works and what not ? 
> 
> if you want the broker to create destinations at startup before a client 
> start using them you need to configure this like said here 
> http://activemq.apache.org/configure-startup-destinations.html <http://activemq.apache.org/configure-startup-destinations.html>
> by adding your destinations like below you can see them on the web console 
> 
> <destinations> 
> 
>       <queue physicalName="FOO.BAR" /> 
> 
>       <topic physicalName="SOME.TOPIC" /> 
> 
>     </destinations> 
> 
> if you want to see many changes without restarting the broker you can add 
> this very useful plugin 
> http://activemq.apache.org/runtime-configuration.html <http://activemq.apache.org/runtime-configuration.html>
> 
> <plugins> 
> ... 
> <runtimeConfigurationPlugin checkPeriod="1000" /> 
> ... 
> </plugins> 
> 
> 
> 
> Kind regards. 
> 
> *BENNOUR HASSEN* 
> 
> *SOA **Architect **/ **Java **Software Engineer* 
> 
> 2016-08-01 10:10 GMT+02:00 crishel.yumul <[hidden email] <x-msg://4/user/SendEmail.jtp?type=node&node=4714899&i=0>>: 
> 
> > To the groups.properties.. 
> > * AMQ-users=client1,client2 
> > * AMQ-users=“client1”,”client2” 
> > *AMW-users=‘client1’,’client2' 
> > 
> > 
> > I want my authorization to read these 2 clients and create 2 topic 
> > destination on web console. But nothing worked out. Any help? 
> > 
> > Thanks! 
> > 
> > Best regards, 
> > Crishel Yumul 
> > DevOps 
> > TORO Limited 
> > 
> > > On Aug 1, 2016, at 3:34 PM, Hassen Bennour [via ActiveMQ] < 
> > [hidden email] <x-msg://4/user/SendEmail.jtp?type=node&node=4714899&i=1>> wrote: 
> > > 
> > > Hello, 
> > > where you done this ?*. I've tried adding (" ") and (' '), but it didn't 
> > > worked out. * 
> > > 
> > > You can do this by adding an authorizationEntry for each user. 
> > > 
> > > <authorizationPlugin> 
> > >         <map> 
> > >           <authorizationMap> 
> > >             <authorizationEntries> 
> > >               <authorizationEntry topic="client1.some.topic.>" 
> > read="client1" 
> > > write="client1" admin="AMQ-admin,client1" /> 
> > >               <authorizationEntry topic="client2.some.topic.>" 
> > read="client2" 
> > > write="client2" admin="AMQ-admin,client2" /> 
> > >             </authorizationEntries> 
> > >           </authorizationMap> 
> > >         </map> 
> > > </authorizationPlugin> 
> > > 
> > > 
> > > 
> > > Kind regards. 
> > > 
> > > *BENNOUR HASSEN* 
> > > 
> > > *SOA **Architect **/ **Java **Software Engineer* 
> > > 
> > > 2016-08-01 3:11 GMT+02:00 crishel.yumul <[hidden email] 
> > <x-msg://2/user/SendEmail.jtp?type=node&node=4714897&i=0 <x-msg://2/user/SendEmail.jtp?type=node&node=4714897&i=0>>>: 
> > > 
> > > > Thank you, Hassen! :) 
> > > > I've already configured the jaasAuth plugin... 
> > > > 
> > > > Here's my follow-up question: 
> > > > In the group.properties, I have 2 users. Client1 and Client 2. Both are 
> > > > configured to have own topic ("client1.some.topic" and 
> > > > "client2.some.topic"). But upon running my broker, my broker console 
> > only 
> > > > shows the client2.some.topic.. I've tried adding (" ") and (' '), but 
> > it 
> > > > didn't worked out. 
> > > > 
> > > > Now, is there any way I can command my broker to authorize the 2 users 
> > with 
> > > > their own topic name? So that the web console can display both their 
> > topic? 
> > > > 
> > > > Thank you! Hope there will be an answer. It will be greatly 
> > appreciated! 
> > > > 
> > > > 
> > > > Regards, 
> > > > Crishel Yumul 
> > > > 
> > > > 
> > > > 
> > > > -- 
> > > > View this message in context: 
> > > > 
> > http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html>
> > < 
> > http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html>
> > > 
> > > > Sent from the ActiveMQ - User mailing list archive at Nabble.com <http://nabble.com/> < 
> > http://nabble.com/ <http://nabble.com/>>. 
> > > > 
> > > 
> > > 
> > > If you reply to this email, your message will be added to the discussion 
> > below: 
> > > 
> > http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html>
> > < 
> > http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html>
> > > 
> > > To unsubscribe from For each user group.properties, click here < 
> > >. 
> > > NAML < 
> >  <applewebdata://AE8807CD-874D-436E-9A63-1E44FDB81454>http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml <http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
> > > 
> > 
> > 
> > 
> > 
> > -- 
> > View this message in context: 
> > http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714898.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714898.html>
> > Sent from the ActiveMQ - User mailing list archive at Nabble.com <http://nabble.com/>. 
> > 
> 
> 
> If you reply to this email, your message will be added to the discussion below:
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714899.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714899.html>
> To unsubscribe from For each user group.properties, click here <http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=4714741&code=Y3Jpc2hlbC55dW11bEB0b3JvLmlvfDQ3MTQ3NDF8LTE2NTIyNjIwNjQ=>.
> NAML <http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>




--
View this message in context: http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714957.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: For each user group.properties

Posted by Hassen Bennour <be...@gmail.com>.
Hello,

I'm not sur to understand the problem, can you please resume the whole
problem & configuration and what works and what not ?

if you want the broker to create destinations at startup before a client
start using them you need to configure this like said here
http://activemq.apache.org/configure-startup-destinations.html
by adding your destinations like below you can see them on the web console

<destinations>

      <queue physicalName="FOO.BAR" />

      <topic physicalName="SOME.TOPIC" />

    </destinations>

if you want to see many changes without restarting the broker you can add
this very useful plugin
http://activemq.apache.org/runtime-configuration.html

<plugins>
...
<runtimeConfigurationPlugin checkPeriod="1000" />
...
</plugins>



Kind regards.

*BENNOUR HASSEN*

*SOA **Architect **/ **Java **Software Engineer*

2016-08-01 10:10 GMT+02:00 crishel.yumul <cr...@toro.io>:

> To the groups.properties..
> * AMQ-users=client1,client2
> * AMQ-users=“client1”,”client2”
> *AMW-users=‘client1’,’client2'
>
>
> I want my authorization to read these 2 clients and create 2 topic
> destination on web console. But nothing worked out. Any help?
>
> Thanks!
>
> Best regards,
> Crishel Yumul
> DevOps
> TORO Limited
>
> > On Aug 1, 2016, at 3:34 PM, Hassen Bennour [via ActiveMQ] <
> ml-node+s2283324n4714897h27@n4.nabble.com> wrote:
> >
> > Hello,
> > where you done this ?*. I've tried adding (" ") and (' '), but it didn't
> > worked out. *
> >
> > You can do this by adding an authorizationEntry for each user.
> >
> > <authorizationPlugin>
> >         <map>
> >           <authorizationMap>
> >             <authorizationEntries>
> >               <authorizationEntry topic="client1.some.topic.>"
> read="client1"
> > write="client1" admin="AMQ-admin,client1" />
> >               <authorizationEntry topic="client2.some.topic.>"
> read="client2"
> > write="client2" admin="AMQ-admin,client2" />
> >             </authorizationEntries>
> >           </authorizationMap>
> >         </map>
> > </authorizationPlugin>
> >
> >
> >
> > Kind regards.
> >
> > *BENNOUR HASSEN*
> >
> > *SOA **Architect **/ **Java **Software Engineer*
> >
> > 2016-08-01 3:11 GMT+02:00 crishel.yumul <[hidden email]
> <x-msg://2/user/SendEmail.jtp?type=node&node=4714897&i=0>>:
> >
> > > Thank you, Hassen! :)
> > > I've already configured the jaasAuth plugin...
> > >
> > > Here's my follow-up question:
> > > In the group.properties, I have 2 users. Client1 and Client 2. Both are
> > > configured to have own topic ("client1.some.topic" and
> > > "client2.some.topic"). But upon running my broker, my broker console
> only
> > > shows the client2.some.topic.. I've tried adding (" ") and (' '), but
> it
> > > didn't worked out.
> > >
> > > Now, is there any way I can command my broker to authorize the 2 users
> with
> > > their own topic name? So that the web console can display both their
> topic?
> > >
> > > Thank you! Hope there will be an answer. It will be greatly
> appreciated!
> > >
> > >
> > > Regards,
> > > Crishel Yumul
> > >
> > >
> > >
> > > --
> > > View this message in context:
> > >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
> >
> > > Sent from the ActiveMQ - User mailing list archive at Nabble.com <
> http://nabble.com/>.
> > >
> >
> >
> > If you reply to this email, your message will be added to the discussion
> below:
> >
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html
> <
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html
> >
> > To unsubscribe from For each user group.properties, click here <
> http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=4714741&code=Y3Jpc2hlbC55dW11bEB0b3JvLmlvfDQ3MTQ3NDF8LTE2NTIyNjIwNjQ=
> >.
> > NAML <
> http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml
> >
>
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714898.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>

Re: For each user group.properties

Posted by "crishel.yumul" <cr...@toro.io>.
To the groups.properties..
* AMQ-users=client1,client2
* AMQ-users=“client1”,”client2”
*AMW-users=‘client1’,’client2'


I want my authorization to read these 2 clients and create 2 topic destination on web console. But nothing worked out. Any help?

Thanks!

Best regards,
Crishel Yumul
DevOps
TORO Limited

> On Aug 1, 2016, at 3:34 PM, Hassen Bennour [via ActiveMQ] <ml...@n4.nabble.com> wrote:
> 
> Hello, 
> where you done this ?*. I've tried adding (" ") and (' '), but it didn't 
> worked out. * 
> 
> You can do this by adding an authorizationEntry for each user. 
> 
> <authorizationPlugin> 
>         <map> 
>           <authorizationMap> 
>             <authorizationEntries> 
>               <authorizationEntry topic="client1.some.topic.>" read="client1" 
> write="client1" admin="AMQ-admin,client1" /> 
>               <authorizationEntry topic="client2.some.topic.>" read="client2" 
> write="client2" admin="AMQ-admin,client2" /> 
>             </authorizationEntries> 
>           </authorizationMap> 
>         </map> 
> </authorizationPlugin> 
> 
> 
> 
> Kind regards. 
> 
> *BENNOUR HASSEN* 
> 
> *SOA **Architect **/ **Java **Software Engineer* 
> 
> 2016-08-01 3:11 GMT+02:00 crishel.yumul <[hidden email] <x-msg://2/user/SendEmail.jtp?type=node&node=4714897&i=0>>: 
> 
> > Thank you, Hassen! :) 
> > I've already configured the jaasAuth plugin... 
> > 
> > Here's my follow-up question: 
> > In the group.properties, I have 2 users. Client1 and Client 2. Both are 
> > configured to have own topic ("client1.some.topic" and 
> > "client2.some.topic"). But upon running my broker, my broker console only 
> > shows the client2.some.topic.. I've tried adding (" ") and (' '), but it 
> > didn't worked out. 
> > 
> > Now, is there any way I can command my broker to authorize the 2 users with 
> > their own topic name? So that the web console can display both their topic? 
> > 
> > Thank you! Hope there will be an answer. It will be greatly appreciated! 
> > 
> > 
> > Regards, 
> > Crishel Yumul 
> > 
> > 
> > 
> > -- 
> > View this message in context: 
> > http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html>
> > Sent from the ActiveMQ - User mailing list archive at Nabble.com <http://nabble.com/>. 
> > 
> 
> 
> If you reply to this email, your message will be added to the discussion below:
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html <http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714897.html>
> To unsubscribe from For each user group.properties, click here <http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=4714741&code=Y3Jpc2hlbC55dW11bEB0b3JvLmlvfDQ3MTQ3NDF8LTE2NTIyNjIwNjQ=>.
> NAML <http://activemq.2283324.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>




--
View this message in context: http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714898.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: For each user group.properties

Posted by Hassen Bennour <be...@gmail.com>.
Hello,
where you done this ?*. I've tried adding (" ") and (' '), but it didn't
worked out. *

You can do this by adding an authorizationEntry for each user.

<authorizationPlugin>
        <map>
          <authorizationMap>
            <authorizationEntries>
              <authorizationEntry topic="client1.some.topic.>" read="client1"
write="client1" admin="AMQ-admin,client1" />
              <authorizationEntry topic="client2.some.topic.>" read="client2"
write="client2" admin="AMQ-admin,client2" />
            </authorizationEntries>
          </authorizationMap>
        </map>
</authorizationPlugin>



Kind regards.

*BENNOUR HASSEN*

*SOA **Architect **/ **Java **Software Engineer*

2016-08-01 3:11 GMT+02:00 crishel.yumul <cr...@toro.io>:

> Thank you, Hassen! :)
> I've already configured the jaasAuth plugin...
>
> Here's my follow-up question:
> In the group.properties, I have 2 users. Client1 and Client 2. Both are
> configured to have own topic ("client1.some.topic" and
> "client2.some.topic"). But upon running my broker, my broker console only
> shows the client2.some.topic.. I've tried adding (" ") and (' '), but it
> didn't worked out.
>
> Now, is there any way I can command my broker to authorize the 2 users with
> their own topic name? So that the web console can display both their topic?
>
> Thank you! Hope there will be an answer. It will be greatly appreciated!
>
>
> Regards,
> Crishel Yumul
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>

Re: For each user group.properties

Posted by "crishel.yumul" <cr...@toro.io>.
Thank you, Hassen! :)
I've already configured the jaasAuth plugin...

Here's my follow-up question:
In the group.properties, I have 2 users. Client1 and Client 2. Both are
configured to have own topic ("client1.some.topic" and
"client2.some.topic"). But upon running my broker, my broker console only
shows the client2.some.topic.. I've tried adding (" ") and (' '), but it
didn't worked out. 

Now, is there any way I can command my broker to authorize the 2 users with
their own topic name? So that the web console can display both their topic?

Thank you! Hope there will be an answer. It will be greatly appreciated! 


Regards,
Crishel Yumul



--
View this message in context: http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741p4714892.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: For each user group.properties

Posted by Hassen Bennour <be...@gmail.com>.
Hello,

your configuration is ok for the plugin, but do not forgot
<jaasAuthenticationPlugin configuration="activemq-domain"/>
like this
http://svn.apache.org/repos/asf/activemq/trunk/activemq-unit-tests/src/test/resources/org/apache/activemq/security/jaas-broker.xml




Kind regards.

*BENNOUR HASSEN*

*SOA **Architect **/ **Java **Software Engineer*

2016-07-29 4:27 GMT+02:00 crishel.yumul <cr...@toro.io>:

> Is there any way I can authorize multiple users under the group name
> AMQ-users located on my groups.properties.
>
> Here's my groups.properties:
>
> AMQ-admin=admin
> AMQ-users=client1,client2
>
> On my authorization plugin i call AMQ-users to authorzied these two users
> Here's my authorization plugin:
>
> <authorizationPlugin>
>         <map>
>           <authorizationMap>
>             <authorizationEntries>
>               <authorizationEntry topic="${AMQ-users}.some.topic.>"
> read="AMQ-users" write="AMQ-users" admin="AMQ-admin,AMQ-users" />
>             </authorizationEntries>
>           </authorizationMap>
>         </map>
> </authorizationPlugin>
>
> Any help? or are there any additional configuration?
>
> Regards,
> Crishel Yumul
>
>
>
> --
> View this message in context:
> http://activemq.2283324.n4.nabble.com/For-each-user-group-properties-tp4714741.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>