You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@qpid.apache.org by Brandon Pedersen <bp...@gmail.com> on 2011/11/11 08:05:09 UTC
acl for source address
This is probably a shot in the dark but I was wondering if there is a
way to control who can login from which address. I have the qpid
server on a public network and would only like to allow certain users
to be able to connect on that interface. I would then allow an admin
user to connect only from the local interface. Is that even possible?
Thanks,
-Brandon
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org
Re: acl for source address
Posted by Robbie Gemmell <ro...@gmail.com>.
The Java broker can do IP/hostname based white/black listing, but I
dont think either broker can currently exclude certain users from
certain addresses.
Robbie
On 11 November 2011 07:05, Brandon Pedersen <bp...@gmail.com> wrote:
> This is probably a shot in the dark but I was wondering if there is a
> way to control who can login from which address. I have the qpid
> server on a public network and would only like to allow certain users
> to be able to connect on that interface. I would then allow an admin
> user to connect only from the local interface. Is that even possible?
>
> Thanks,
>
> -Brandon
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project: http://qpid.apache.org
> Use/Interact: mailto:users-subscribe@qpid.apache.org
>
>
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org
Re: acl for source address
Posted by Brandon Pedersen <bp...@gmail.com>.
That's what I thought...hopefully one of the developers can pick it up
and work on it :) If not, I may look at it more in the future.
On Fri, Nov 11, 2011 at 11:18 AM, Jakub Scholz <ja...@scholz.cz> wrote:
> Hi,
>
> The patch is from my colleague. I believe it was probably written for
> the version 0.5, maybe 0.6. Unfortunately since we are not building
> our own Qpid broker but using the Red Hat MRG versions instead, we
> never updated / maintained the patch to work with new versions of
> Qpid. Therefore someone needs to check whether is the patch still
> applicable and eventually write a new patch / update the old one.
>
> Regards
> JAkub
>
> On Fri, Nov 11, 2011 at 18:47, Brandon Pedersen <bp...@gmail.com> wrote:
>> On Fri, Nov 11, 2011 at 7:35 AM, Gordon Sim <gs...@redhat.com> wrote:
>>> There is a JIRA for that and a set of patches attached to it:
>>> https://issues.apache.org/jira/browse/QPID-2305
>>>
>>> I suspect the patches are a little stale now (and should probably be
>>> modified to support ipv6 addresses also).
>>
>> Awesome, that is exactly what I was thinking about, I voted for it. I
>> don't think I will try to fix up and apply the patches at this point
>> unless this won't be implemented in the foreseeable future.
>>
>> Thanks,
>>
>> -Brandon
>>
>> ---------------------------------------------------------------------
>> Apache Qpid - AMQP Messaging Implementation
>> Project: http://qpid.apache.org
>> Use/Interact: mailto:users-subscribe@qpid.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project: http://qpid.apache.org
> Use/Interact: mailto:users-subscribe@qpid.apache.org
>
>
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org
Re: acl for source address
Posted by Jakub Scholz <ja...@scholz.cz>.
Hi,
The patch is from my colleague. I believe it was probably written for
the version 0.5, maybe 0.6. Unfortunately since we are not building
our own Qpid broker but using the Red Hat MRG versions instead, we
never updated / maintained the patch to work with new versions of
Qpid. Therefore someone needs to check whether is the patch still
applicable and eventually write a new patch / update the old one.
Regards
JAkub
On Fri, Nov 11, 2011 at 18:47, Brandon Pedersen <bp...@gmail.com> wrote:
> On Fri, Nov 11, 2011 at 7:35 AM, Gordon Sim <gs...@redhat.com> wrote:
>> There is a JIRA for that and a set of patches attached to it:
>> https://issues.apache.org/jira/browse/QPID-2305
>>
>> I suspect the patches are a little stale now (and should probably be
>> modified to support ipv6 addresses also).
>
> Awesome, that is exactly what I was thinking about, I voted for it. I
> don't think I will try to fix up and apply the patches at this point
> unless this won't be implemented in the foreseeable future.
>
> Thanks,
>
> -Brandon
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project: http://qpid.apache.org
> Use/Interact: mailto:users-subscribe@qpid.apache.org
>
>
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org
Re: acl for source address
Posted by Brandon Pedersen <bp...@gmail.com>.
On Fri, Nov 11, 2011 at 7:35 AM, Gordon Sim <gs...@redhat.com> wrote:
> There is a JIRA for that and a set of patches attached to it:
> https://issues.apache.org/jira/browse/QPID-2305
>
> I suspect the patches are a little stale now (and should probably be
> modified to support ipv6 addresses also).
Awesome, that is exactly what I was thinking about, I voted for it. I
don't think I will try to fix up and apply the patches at this point
unless this won't be implemented in the foreseeable future.
Thanks,
-Brandon
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org
Re: acl for source address
Posted by Gordon Sim <gs...@redhat.com>.
On 11/11/2011 07:05 AM, Brandon Pedersen wrote:
> This is probably a shot in the dark but I was wondering if there is a
> way to control who can login from which address. I have the qpid
> server on a public network and would only like to allow certain users
> to be able to connect on that interface. I would then allow an admin
> user to connect only from the local interface. Is that even possible?
There is a JIRA for that and a set of patches attached to it:
https://issues.apache.org/jira/browse/QPID-2305
I suspect the patches are a little stale now (and should probably be
modified to support ipv6 addresses also).
---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project: http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org