Return-Path: 
 <users-return-11162-apmail-activemq-users-archive=activemq.apache.org@activemq.apache.org>
Delivered-To: apmail-activemq-users-archive@www.apache.org
Received: (qmail 69107 invoked from network); 25 Oct 2007 14:20:02 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 25 Oct 2007 14:20:02 -0000
Received: (qmail 46714 invoked by uid 500); 25 Oct 2007 14:19:47 -0000
Delivered-To: apmail-activemq-users-archive@activemq.apache.org
Received: (qmail 46694 invoked by uid 500); 25 Oct 2007 14:19:47 -0000
Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@activemq.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@activemq.apache.org>
List-Post: <mailto:users@activemq.apache.org>
List-Id: <users.activemq.apache.org>
Reply-To: users@activemq.apache.org
Delivered-To: mailing list users@activemq.apache.org
Received: (qmail 46673 invoked by uid 99); 25 Oct 2007 14:19:47 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Oct 2007 07:19:47 -0700
X-ASF-Spam-Status: No, hits=2.6 required=10.0
	tests=DNS_FROM_OPENWHOIS,SPF_HELO_PASS,SPF_PASS,WHOIS_MYPRIVREG
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Received: from [216.139.236.158] (HELO kuber.nabble.com) (216.139.236.158)
    by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 25 Oct 2007 14:19:50 +0000
Received: from isper.nabble.com ([192.168.236.156])
	by kuber.nabble.com with esmtp (Exim 4.63)
	(envelope-from <lists@nabble.com>)
	id 1Il3YY-0006YU-1G
	for users@activemq.apache.org; Thu, 25 Oct 2007 07:19:30 -0700
Message-ID: <13407614.post@talk.nabble.com>
Date: Thu, 25 Oct 2007 07:19:30 -0700 (PDT)
From: ttmdev <joe.fernandez@ttmsolutions.com>
To: users@activemq.apache.org
Subject: Re: jaas security
In-Reply-To: <13402681.post@talk.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Nabble-From: joe.fernandez@ttmsolutions.com
References: <13380046.post@talk.nabble.com>
 <11198774.3691193292581769.JavaMail.root@ly.sdf.com>
 <13402681.post@talk.nabble.com>
X-Virus-Checked: Checked by ClamAV on apache.org


Clear out your brokers data directory (i.e., ../activemq-data/<broker-name>).

I believe the exception is being hurled because there is a destination in
the data directory that was previously created w/out the security
credentials that you're now trying to use.

I was getting the same exception and clearing out my brokers data directory
took care of the exception.   

Joe 
 

lancedv wrote:
> 
> Hi Tom
> 
> Thanks for taking time to help me out. Here's a snippet of my config:
> 
> <plugins>
>     <!--
> 
>    <jaasAuthenticationPlugin configuration="activemq-domain"/>
>    -->
>     <simpleAuthenticationPlugin>
>         <users>
>                 <authenticationUser username="system" password="manager"
>                         groups="users,admins"/>
>                 <authenticationUser username="user" password="password"
>                         groups="users"/>
>                 <authenticationUser username="guest" password="password"
> groups="guests"/>
>         </users>
>     </simpleAuthenticationPlugin>
> 
>     <authorizationPlugin>
>         <map>
>         <authorizationMap>
>           <authorizationEntries>
>              <authorizationEntry queue=">" read="admins" write="admins"
> admin="admins"/>
>              <authorizationEntry topic=">" read="admins" write="admins"
> admin="admins"/>
>            <!--  <authorizationEntry topic="sms.>" read="users"
> write="users" admin="users"/> -->
>           </authorizationEntries>
> 
> 
>           <tempDestinationAuthorizationEntry>
>               <tempDestinationAuthorizationEntry
> read="tempDestinationAdmins" write="tempDestinationAdmins"
> admin="tempDestinationAdmins"/>
>            </tempDestinationAuthorizationEntry>
> 
> 
>         </authorizationMap>
>        </map>
>    </authorizationPlugin>
> 
>   </plugins>
> 
> Im playin around with Jaas and simple plugins but had no success so far. I
> checked the source and it seems im getting this error because of null
> securitycontext being returned by getsecuritycontext method. My guess is
> almost the same as yours that it is trying to authenticate itself but
> where should i fix that?
> 
> 
> 
> 
> Tom Samplonius-2 wrote:
>> 
>> 
>> ----- "lancedv" <lance_devera@yahoo.com> wrote:
>>> Hi guys,
>>> 
>>> Im trying to use jaas in my activemq instance and have followed the
>>> instructions in the security page and some hints in this forum but im
>>> getting this error when starting activemq:
>>> 
>>> ERROR BrokerService                  - Failed to start ActiveMQ JMS
>>> Message
>>> Broker. Reason: java.lang.SecurityException: User is not
>>> authenticated.
>> ...
>>> 
>>> im using activemq snapshot 5 running on fedora 6.
>> 
>> 
>>   What does your config file look like?
>> 
>>   Unfortunately, I found there are certain things you can password
>> protect, and have other things work.  For instance, the management topic. 
>> It will fail to be created, as apparently ActiveMQ demands that ActiveMQ
>> use an admin password when connecting to itself.  It is a bit bizarre.
>> 
>> 
>>> Any help will be very much appreciated. Thanks
>>> -- 
>>> View this message in context:
>>> http://www.nabble.com/jaas-security-tf4682391s2354.html#a13380046
>>> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>> 
>> 
>> Tom
>> 
>> 
> 
> 

-- 
View this message in context: http://www.nabble.com/jaas-security-tf4682391s2354.html#a13407614
Sent from the ActiveMQ - User mailing list archive at Nabble.com.