Mailing-List: contact activemq-users-help@geronimo.apache.org; run by ezmlm
Precedence: bulk
Reply-To: activemq-users@geronimo.apache.org
Received-SPF: pass (herse.apache.org: local policy)
Message-ID: <457689A3.2090205@exist.com>
Date: Wed, 06 Dec 2006 17:13:07 +0800
From: Jonas Lim <jlim@exist.com>
User-Agent: Thunderbird 1.5.0.8 (Windows/20061025)
MIME-Version: 1.0
To: activemq-users@geronimo.apache.org
Subject: Re: tempdestination authorization entry error
References: <7694164.post@talk.nabble.com> <45753012.3080204@exist.com>
 <7698937.post@talk.nabble.com> <45758EC9.30500@exist.com>
 <7714145.post@talk.nabble.com>
In-Reply-To: <7714145.post@talk.nabble.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

yes. the "." is use to seperate the names in a path. 

In your example, you can try using "com.xxx.>" and it should be able to 
give authorization to "com.xxx" or "com.xxx."

For more activemq wildcard support :
http://www.activemq.org/site/wildcards.html


Regards,
Jonas


pradeep wrote:
> Thanks for yoy excellent support so far.
>
> Is '.' an escape character. All my queues are in  the format com.xxx. I had
> an entry
>
>  <authorizationEntry queue="com>" read="users" write="users" admin="users" 
> />
>
> I got authorization error.
>
> I replaced it with
>  <authorizationEntry queue="com.>" read="users" write="users" admin="users" 
> />
>
> It worked. Note the '.' after com.
>
>
>
>
> jlim wrote:
>   
>>
>> Yes.  You'll have to provide authorization for all destinations that 
>> you'll be using.  What you probably want to do is to provide 
>> read/write/admin access to all destinations for your admin users eg. 
>>      <authorizationEntry queue=">" read="admin" write="admin" 
>> admin="admin"  />
>>
>> then just provide authorization entries for specific destinations for 
>> your other users
>>
>> Regards,
>> Jonas
>>
>>
>>
>> pradeep wrote:
>>     
>>> One more question - Do Queues  and topics not mentioned in
>>> authorizationEntry
>>> required authentication ?
>>> pradeep
>>>
>>>
>>> jlim wrote:
>>>   
>>>       
>>>> Hi,
>>>>
>>>> The Tempdestination authorization entry  was just added on the 4.2 trunk 
>>>> (revision 479639). I don't believe it made it to the 4.1 build.  You can 
>>>> checkout the latest from trunk or download a nightly build 
>>>> http://people.apache.org/repo/m2-snapshot-repository/org/apache/activemq/apache-activemq/4.2-incubator-SNAPSHOT/
>>>>
>>>> The ">" is a  wildcard.  You can use it as is to indicate all 
>>>> queue/topic or you can append it to a destination name (ie. USERS.>) 
>>>> indicating all destinations that starts with "USERS."
>>>>
>>>>
>>>> Regard,
>>>> Jonas
>>>>
>>>> pradeep wrote:
>>>>     
>>>>         
>>>>> I am using the Tempdestination authorization entry as mentioned in
>>>>> http://activemq.org/site/security.html.
>>>>>
>>>>> I am getting this error when starting embeded activemq server 
>>>>>  Failed to load type: tempDestinationAuthorizationEntry. Reason:
>>>>> java.lang.ClassNotFoundException: tempDestinationAuthorizationEntry;
>>>>> nested
>>>>> exception is java.lang.ClassNotFoundException:
>>>>> tempDestinationAuthorizationEntry
>>>>>
>>>>> I am using activeMQ 4.1
>>>>>
>>>>> Also what does ">" right angle bracker indicate in the below tag ?
>>>>> <authorizationEntry queue=">" read="admins" write="admins"
>>>>> admin="admins"
>>>>> />
>>>>>   
>>>>>       
>>>>>           
>>>>     
>>>>         
>>>   
>>>       
>>     
>
>