Return-Path: 
 <users-return-11195-apmail-activemq-users-archive=activemq.apache.org@activemq.apache.org>
Delivered-To: apmail-activemq-users-archive@www.apache.org
Received: (qmail 33495 invoked from network); 26 Oct 2007 13:50:50 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
  by minotaur.apache.org with SMTP; 26 Oct 2007 13:50:50 -0000
Received: (qmail 4230 invoked by uid 500); 26 Oct 2007 13:50:37 -0000
Delivered-To: apmail-activemq-users-archive@activemq.apache.org
Received: (qmail 4213 invoked by uid 500); 26 Oct 2007 13:50:37 -0000
Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@activemq.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@activemq.apache.org>
List-Post: <mailto:users@activemq.apache.org>
List-Id: <users.activemq.apache.org>
Reply-To: users@activemq.apache.org
Delivered-To: mailing list users@activemq.apache.org
Received: (qmail 4204 invoked by uid 99); 26 Oct 2007 13:50:37 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Oct 2007 06:50:37 -0700
X-ASF-Spam-Status: No, hits=2.6 required=10.0
	tests=DNS_FROM_OPENWHOIS,SPF_HELO_PASS,SPF_PASS,WHOIS_MYPRIVREG
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Received: from [216.139.236.158] (HELO kuber.nabble.com) (216.139.236.158)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 26 Oct 2007 13:50:38 +0000
Received: from isper.nabble.com ([192.168.236.156])
	by kuber.nabble.com with esmtp (Exim 4.63)
	(envelope-from <lists@nabble.com>)
	id 1IlPZq-0003oG-8K
	for users@activemq.apache.org; Fri, 26 Oct 2007 06:50:18 -0700
Message-ID: <13427727.post@talk.nabble.com>
Date: Fri, 26 Oct 2007 06:50:18 -0700 (PDT)
From: ttmdev <joe.fernandez@ttmsolutions.com>
To: users@activemq.apache.org
Subject: Re: jaas security
In-Reply-To: <13421459.post@talk.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Nabble-From: joe.fernandez@ttmsolutions.com
References: <13380046.post@talk.nabble.com>
 <11198774.3691193292581769.JavaMail.root@ly.sdf.com>
 <13402681.post@talk.nabble.com> <13407614.post@talk.nabble.com>
 <13421459.post@talk.nabble.com>
X-Virus-Checked: Checked by ClamAV on apache.org


Yup, I am using <jaasAuthenticationPlugin> with no problem. 

Can you post your complete activemq.xml?

Try commenting out your commandAgent like this

<!-- <commandAgent xmlns="http://activemq.org/config/1.0"/> -->

Joe






lancedv wrote:
> 
> Hi Joe,
> 
> Yup it solved that problem but im now gettin these errors:
> 
> javax.jms.JMSException: User name or password is invalid.
>         at
> org.apache.activemq.util.JMSExceptionSupport.create(JMSExceptionSupport.java:49)
> 
> 
> Caused by: java.lang.SecurityException: User name or password is invalid.
>         at
> org.apache.activemq.security.JaasAuthenticationBroker.addConnection(JaasAuthenticationBroker.java:83)
> 
> 
> Caused by: javax.security.auth.login.LoginException:
> java.lang.NullPointerException
>         at java.util.Hashtable.get(Hashtable.java:334)
> 
> It can find these files login.config, users.properties and
> groups.properties but i noticed that one of the errors contain a
> nullpointerexception, what am i missing?
> 
> Im assuming you had tried Jaas before or maybe still using it right now,
> how did you do it?
> 
> Thanks very much
> 
> Jan
> 
> ttmdev wrote:
>> 
>> Clear out your brokers data directory (i.e.,
>> ../activemq-data/<broker-name>).
>> 
>> I believe the exception is being hurled because there is a destination in
>> the data directory that was previously created w/out the security
>> credentials that you're now trying to use.
>> 
>> I was getting the same exception and clearing out my brokers data
>> directory took care of the exception.   
>> 
>> Joe 
>>  
>> 
>> lancedv wrote:
>>> 
>>> Hi Tom
>>> 
>>> Thanks for taking time to help me out. Here's a snippet of my config:
>>> 
>>> <plugins>
>>>     <!--
>>> 
>>>    <jaasAuthenticationPlugin configuration="activemq-domain"/>
>>>    -->
>>>     <simpleAuthenticationPlugin>
>>>         <users>
>>>                 <authenticationUser username="system" password="manager"
>>>                         groups="users,admins"/>
>>>                 <authenticationUser username="user" password="password"
>>>                         groups="users"/>
>>>                 <authenticationUser username="guest" password="password"
>>> groups="guests"/>
>>>         </users>
>>>     </simpleAuthenticationPlugin>
>>> 
>>>     <authorizationPlugin>
>>>         <map>
>>>         <authorizationMap>
>>>           <authorizationEntries>
>>>              <authorizationEntry queue=">" read="admins" write="admins"
>>> admin="admins"/>
>>>              <authorizationEntry topic=">" read="admins" write="admins"
>>> admin="admins"/>
>>>            <!--  <authorizationEntry topic="sms.>" read="users"
>>> write="users" admin="users"/> -->
>>>           </authorizationEntries>
>>> 
>>> 
>>>           <tempDestinationAuthorizationEntry>
>>>               <tempDestinationAuthorizationEntry
>>> read="tempDestinationAdmins" write="tempDestinationAdmins"
>>> admin="tempDestinationAdmins"/>
>>>            </tempDestinationAuthorizationEntry>
>>> 
>>> 
>>>         </authorizationMap>
>>>        </map>
>>>    </authorizationPlugin>
>>> 
>>>   </plugins>
>>> 
>>> Im playin around with Jaas and simple plugins but had no success so far.
>>> I checked the source and it seems im getting this error because of null
>>> securitycontext being returned by getsecuritycontext method. My guess is
>>> almost the same as yours that it is trying to authenticate itself but
>>> where should i fix that?
>>> 
>>> 
>>> 
>>> 
>>> Tom Samplonius-2 wrote:
>>>> 
>>>> 
>>>> ----- "lancedv" <lance_devera@yahoo.com> wrote:
>>>>> Hi guys,
>>>>> 
>>>>> Im trying to use jaas in my activemq instance and have followed the
>>>>> instructions in the security page and some hints in this forum but im
>>>>> getting this error when starting activemq:
>>>>> 
>>>>> ERROR BrokerService                  - Failed to start ActiveMQ JMS
>>>>> Message
>>>>> Broker. Reason: java.lang.SecurityException: User is not
>>>>> authenticated.
>>>> ...
>>>>> 
>>>>> im using activemq snapshot 5 running on fedora 6.
>>>> 
>>>> 
>>>>   What does your config file look like?
>>>> 
>>>>   Unfortunately, I found there are certain things you can password
>>>> protect, and have other things work.  For instance, the management
>>>> topic.  It will fail to be created, as apparently ActiveMQ demands that
>>>> ActiveMQ use an admin password when connecting to itself.  It is a bit
>>>> bizarre.
>>>> 
>>>> 
>>>>> Any help will be very much appreciated. Thanks
>>>>> -- 
>>>>> View this message in context:
>>>>> http://www.nabble.com/jaas-security-tf4682391s2354.html#a13380046
>>>>> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>>>> 
>>>> 
>>>> Tom
>>>> 
>>>> 
>>> 
>>> 
>> 
>> 
> 
> 

-- 
View this message in context: http://www.nabble.com/jaas-security-tf4682391s2354.html#a13427727
Sent from the ActiveMQ - User mailing list archive at Nabble.com.