activemq-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Chris Marasti-Georg" <c.marastige...@gmail.com>
Subject Re: Authorization/Authentication
Date Thu, 11 Oct 2007 21:04:31 GMT
Still getting the error.  Here is the entry in the map.  I added
"users,guests" like you said, also added "all" which is a group that guest
should be a member of, and just for fun added guest by name.:

                            <authorizationEntry topic="ActiveMQ.Advisory.>"
read="guest,users,guests,all" write="guest,users,guests,all"
admin="guest,users,guests,all"/>

Here's the guest related stuff I have in the config file:
in plugins:
            <simpleAuthenticationPlugin userGroups="#groups"
userPasswords="#users"/>

outside of the broker element:
    <util:map id="users">
        <entry key="guest" value="guest"/>
    </util:map>
    <util:map id="groups">
        <entry key="guest"><ref bean="guestGroup"/></entry>
    </util:map>
    <util:set id="guestGroup">
        <value>eventReader</value>
        <value>all</value>
    </util:set>

here is the error, with the few items before it from the log:

2007-10-11 16:54:34,236 DEBUG [
org.apache.activemq.transport.WireFormatNegotiator] Sending: WireFormatInfo
{ version=2, properties={TightEncodingEnabled=true, CacheSize=1024,
TcpNoDelayEnabled=true, SizePrefixDisabled=false, StackTraceEnabled=true,
MaxInactivityDuration=30000, CacheEnabled=true}, magic=[A,c,t,i,v,e,M,Q]}
2007-10-11 16:54:34,236 DEBUG [
org.apache.activemq.transport.WireFormatNegotiator] Received WireFormat:
WireFormatInfo { version=2, properties={TightEncodingEnabled=true,
CacheSize=1024, TcpNoDelayEnabled=true, SizePrefixDisabled=false,
StackTraceEnabled=true, MaxInactivityDuration=30000, CacheEnabled=true},
magic=[A,c,t,i,v,e,M,Q]}
2007-10-11 16:54:34,236 DEBUG [
org.apache.activemq.transport.WireFormatNegotiator] tcp:///127.0.0.1:2211
before negotiation: OpenWireFormat{version=2, cacheEnabled=false,
stackTraceEnabled=false, tightEncodingEnabled=false,
sizePrefixDisabled=false}
2007-10-11 16:54:34,236 DEBUG [
org.apache.activemq.transport.WireFormatNegotiator] tcp:///127.0.0.1:2211
after negotiation: OpenWireFormat{version=2, cacheEnabled=true,
stackTraceEnabled=true, tightEncodingEnabled=true, sizePrefixDisabled=false}
2007-10-11 16:54:34,236 DEBUG [
org.apache.activemq.broker.TransportConnection] Setting up new connection:
org.apache.activemq.broker.jmx.ManagedTransportConnection@8ef455
2007-10-11 16:54:34,252 DEBUG [
org.apache.activemq.broker.TransportConnection.Service] Error occured while
processing sync command: java.lang.SecurityException: User guest is not
authorized to create: topic://ActiveMQ.Advisory.Connection
java.lang.SecurityException: User guest is not authorized to create:
topic://ActiveMQ.Advisory.Connection


I'm going to grab a 5.0 snapshot and give it a whirl, see if it works any
better.  The configuration looks easier, at least


On 10/11/07, Mario Siegenthaler <msiegenthaler@inventsoft.ch> wrote:
>
> From my experience with security in ActiveMQ you need to explicitly
> allow everybody to create Advisory topics. This also matches with your
> error message:
>     java.lang.SecurityException: User guest is not authorized to
> create: topic://ActiveMQ.Advisory.Connection
>
> so I'd try adding
> <authorizationEntry topic="ActiveMQ.Advisory.>" read="guests,users"
> write="guests,users" admin="guests,users"/>
>
> to your configuration
>
>
> Mario


<snip>

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message