ActiveMQ ActiveMQ - User

Per-transportconnector authentication

spacer Classic spacer List spacer Threaded
spacer
5 messages spacer
John Fletcher
Reply | Threaded
Open this post in threaded view
|   spacer
Report Content as Inappropriate
spacer
spacer

Per-transportconnector authentication

spacer spacer
I have an ActiveMQ instance with transport connectors as follows:
<transportConnector name="local" uri="tcp://localhost:61616"/>
<transportConnector name="ssl" uri="ssl://0.0.0.0:61617"/>

Is it possible to require authentication on the ssl connector but allow
anonymous authentication on the local connector? I don't have complicated
authorisation rules, I could just give admin access to anyone who
successfully connects by either route.

John
Remove Ads
dejanb
Reply | Threaded
Open this post in threaded view
|   spacer
Report Content as Inappropriate
spacer
spacer

Re: Per-transportconnector authentication

spacer spacer
We don't have that at the moment. The closest thing there is to that is Jaas
dual plugin, which uses certificates to authenticate ssl connections and
user/pass for plain ones.

It shouldn't be hard to implement it. If you want to give it a try take a
look at current plugins

https://fisheye6.atlassian.com/browse/activemq/trunk/activemq-core/src/main/java/org/apache/activemq/security


Regards
--
Dejan Bosanac - twitter.com/dejanb
-----------------
The experts in open source integration and messaging - fusesource.com
ActiveMQ in Action - www.manning.com/snyder/
Blog - www.nighttale.net


On Thu, Aug 18, 2011 at 11:01 AM, John Fletcher <[hidden email]> wrote:

> I have an ActiveMQ instance with transport connectors as follows:
> <transportConnector name="local" uri="tcp://localhost:61616"/>
> <transportConnector name="ssl" uri="ssl://0.0.0.0:61617"/>
>
> Is it possible to require authentication on the ssl connector but allow
> anonymous authentication on the local connector? I don't have complicated
> authorisation rules, I could just give admin access to anyone who
> successfully connects by either route.
>
> John
>
John Fletcher
Reply | Threaded
Open this post in threaded view
|   spacer
Report Content as Inappropriate
spacer
spacer

gipoco.com is neither affiliated with the authors of this page nor responsible for its contents. This is a safe-cache copy of the original web site.