Return-Path: 
 <users-return-7962-apmail-activemq-users-archive=activemq.apache.org@activemq.apache.org>
Delivered-To: apmail-activemq-users-archive@www.apache.org
Received: (qmail 94389 invoked from network); 13 Mar 2007 13:45:05 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 13 Mar 2007 13:45:05 -0000
Received: (qmail 87596 invoked by uid 500); 13 Mar 2007 13:45:13 -0000
Delivered-To: apmail-activemq-users-archive@activemq.apache.org
Received: (qmail 87581 invoked by uid 500); 13 Mar 2007 13:45:12 -0000
Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@activemq.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@activemq.apache.org>
List-Post: <mailto:users@activemq.apache.org>
List-Id: <users.activemq.apache.org>
Reply-To: users@activemq.apache.org
Delivered-To: mailing list users@activemq.apache.org
Received: (qmail 87572 invoked by uid 99); 13 Mar 2007 13:45:12 -0000
Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Mar 2007 06:45:12 -0700
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (herse.apache.org: domain of chirino@gmail.com designates
 66.249.92.175 as permitted sender)
Received: from [66.249.92.175] (HELO ug-out-1314.google.com) (66.249.92.175)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 13 Mar 2007 06:45:01 -0700
Received: by ug-out-1314.google.com with SMTP id m3so274886ugc
        for <users@activemq.apache.org>; Tue, 13 Mar 2007 06:44:39 -0700 (PDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed;
        d=gmail.com; s=beta;
        h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=pGb17eK78eUYyVEmFJiH+MFl5omMzdVVvX75AKgc9KYlTEE77S/Wy8ic69tBvJCu0Px88WQSW+3xo+vksmAtzByGVjT25Ca6sM/UzqvbLqE+BDECvZ4oA66oT2RzCjrBR1x4kwNxc19oGMGeg2TPHTKQ+b8o2ZXRLROOrg2aGMo=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth;
        b=UsYgwBwUn6RM2VsKdQa7cs0RoYCLPTKKvZWlwkpEgeEL+o63XExy7gaUqQe5Ii9OOZQHULLY0om5lu0oOyrw8Ztry3cady5CHBGFFaEkFLhq5SeOBcrcpz7fnsUM2kfOaH7a7ehCz9fmToaF9o4Pd2Hw446i5kBj2g6JTFry5xQ=
Received: by 10.115.76.1 with SMTP id d1mr2413250wal.1173793477934;
        Tue, 13 Mar 2007 06:44:37 -0700 (PDT)
Received: by 10.114.202.6 with HTTP; Tue, 13 Mar 2007 06:44:37 -0700 (PDT)
Message-ID: <af2843cd0703130644i476def69o1f0582cbfe112fce@mail.gmail.com>
Date: Tue, 13 Mar 2007 09:44:37 -0400
From: "Hiram Chirino" <hiram@hiramchirino.com>
Sender: chirino@gmail.com
To: users@activemq.apache.org
Subject: Re: Network of brokers security
In-Reply-To: <8c46aa2a0703121200t70de362cr22c27ef77d1c79e5@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <8c46aa2a0703121200t70de362cr22c27ef77d1c79e5@mail.gmail.com>
X-Google-Sender-Auth: 8fc23d5571838cde
X-Virus-Checked: Checked by ClamAV on apache.org

Looks like 1 broker is not authenticating with the next broker.  I
think we need to provide a way for you to pass a userid/password in
the network connector configuration.

On 3/12/07, David Borja <adborja@gmail.com> wrote:
> Hi AMQ devs!!
>
> I have a problem with the JAAS authentication in netowork of brokers ...
>
> The network of brokers topology is the following ...
>
> I have a broker named "serverdatos" which is configured with a jaas
> security:
>
>  <plugins>
>       <!--  use JAAS to authenticate using the login.config file on the
> classpath to configure JAAS -->
>       <jaasAuthenticationPlugin configuration="activemq-domain" />
>
>       <!--  lets configure a destination based authorization mechanism -->
>       <authorizationPlugin>
>         <map>
>           <authorizationMap>
>
>             <authorizationEntries>
>               <authorizationEntry queue=">" read="admins" write="admins"
> admin="admins" />
>
>               <authorizationEntry topic=">" read="admins" write="admins"
> admin="admins" />
>
>               <authorizationEntry queue="jms/local" read="users"
> write="users" admin="users" />
>
>               <authorizationEntry topic="ActiveMQ.Advisory.>"
> read="guests,users" write="guests,users" admin="guests,users"/>
>
>             </authorizationEntries>
>
>           </authorizationMap>
>         </map>
>       </authorizationPlugin>
>     </plugins>
>
>
> There is another broker named "FF" which has the same security config.
>
> In addition has a network connector config:
>
> <networkConnectors>
>     <networkConnector name="ff and serverdatos"
> uri="static://(tcp://localhost:61616,tcp://serverdatos:61616)"
> failover="true">
>         <staticallyIncludedDestinations>
>             <queue physicalName="jms/central" />
>         </staticallyIncludedDestinations>
>     </networkConnector>
> </networkConnectors>
>
> When the broker FF starts, a SecurityException is thrown:
>
> java.lang.SecurityException: User is not authenticated.
>         at org.apache.activemq.security.AuthorizationBroker.addDestination
> (Autho
> rizationBroker.java:57)
>         at org.apache.activemq.broker.MutableBrokerFilter.addDestination
> (Mutable
> BrokerFilter.java:152)
>         at org.apache.activemq.broker.region.AbstractRegion.lookup
> (AbstractRegio
> n.java:316)
>         at org.apache.activemq.broker.region.AbstractRegion.send
> (AbstractRegion.
> java:291)
>         at org.apache.activemq.broker.region.RegionBroker.send(
> RegionBroker.java
> :380)
>         at org.apache.activemq.broker.TransactionBroker.send(
> TransactionBroker.j
> ava:193)
>         at org.apache.activemq.advisory.AdvisoryBroker.fireAdvisory
> (AdvisoryBrok
> er.java:272)
>         at org.apache.activemq.advisory.AdvisoryBroker.fireAdvisory
> (AdvisoryBrok
> er.java:237)
>         at org.apache.activemq.advisory.AdvisoryBroker.fireAdvisory
> (AdvisoryBrok
> er.java:232)
>         at org.apache.activemq.advisory.AdvisoryBroker.removeConnection
> (Advisory
> Broker.java:205)
>         at org.apache.activemq.broker.BrokerFilter.removeConnection
> (BrokerFilter
> .java:110)
>         at org.apache.activemq.broker.BrokerFilter.removeConnection
> (BrokerFilter
> .java:110)
>         at
> org.apache.activemq.security.JaasAuthenticationBroker.removeConnectio
> n(JaasAuthenticationBroker.java:94)
>         at org.apache.activemq.broker.BrokerFilter.removeConnection
> (BrokerFilter
> .java:110)
>         at org.apache.activemq.broker.MutableBrokerFilter.removeConnection
> (Mutab
> leBrokerFilter.java:120)
>         at
> org.apache.activemq.broker.TransportConnection.processRemoveConnectio
> n(TransportConnection.java:728)
>         at org.apache.activemq.broker.TransportConnection.stop
> (TransportConnecti
> on.java:884)
>         at org.apache.activemq.broker.jmx.ManagedTransportConnection.stop
> (Manage
> dTransportConnection.java:74)
>         at org.apache.activemq.broker.TransportConnection.processShutdown
> (Transp
> ortConnection.java:344)
>         at org.apache.activemq.command.ShutdownInfo.visit(ShutdownInfo.java
> :36)
>         at org.apache.activemq.broker.TransportConnection.service
> (TransportConne
> ction.java:284)
>         at org.apache.activemq.broker.TransportConnection$1.onCommand
> (TransportC
> onnection.java:177)
>         at org.apache.activemq.transport.TransportFilter.onCommand
> (TransportFilt
> er.java:65)
>         at org.apache.activemq.transport.WireFormatNegotiator.onCommand
> (WireForm
> atNegotiator.java:133)
>         at org.apache.activemq.transport.InactivityMonitor.onCommand
> (InactivityM
> onitor.java:122)
>         at org.apache.activemq.transport.TransportSupport.doConsume
> (TransportSup
> port.java:84)
>         at org.apache.activemq.transport.tcp.TcpTransport.run(
> TcpTransport.java:
> 137)
>         at java.lang.Thread.run(Unknown Source)
>
>
> Any ideas???
>
>
> Thanx!!
>


-- 
Regards,
Hiram

Blog: http://hiramchirino.com