Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (athena.apache.org: domain of pjulien@gmail.com designates
 209.85.200.175 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=message-id:date:from:to:subject:mime-version:content-type;
        b=s3N3nYb2xY+bAoGdjebxV7Bpfwn3hBTgMgnBZwThzL/8jTpgHun/Pz6wQqh6MP9zIP
         Smxe0u9KAx1sc4dma2X+ITmvRbMTWRBTnYw0iFHo1urrOR07pXLZ/qsVqHpyWjk/2Zv1
         9dozVkY627GdBT0KzYaZoEKr8ioiqyeWRxXls=
Message-ID: <9bdf03d20807110758q62608e12rd52f7e3810e438@mail.gmail.com>
Date: Fri, 11 Jul 2008 10:58:23 -0400
From: "Patrick Julien" <pjulien@gmail.com>
To: users@activemq.apache.org
Subject: ActiveMQ and Glassfish Realm
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_Part_33420_26482737.1215788303423"

------=_Part_33420_26482737.1215788303423
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

I have read the security page found at
http://activemq.apache.org/security.html but I am somewhat confused by the
information found there.

1. If I wanted ActiveMQ to work with a Glassfish realm, Glassfish does
indeed use JAAS, would I need to code my own plugin based on BrokerPlugin?
Or would it be possible to configure the current JAAS plugin to work with
the glassfish realm?  Note here that I am not looking to replace the OpenMQ
instance found inside Glassfish itself, ActiveMQ would run standalone
outside any container.

2. If I do need to make my own plugin based on BrokerPlugin, what jars are
actually needed to accomplish this?

3. Say this turns out to be too complicated to bridge the two together.  How
sensitive would ActiveMQ be to having the "users.properties" and
"groups.properties" files being refreshed periodically from realm data?

4. Is it possible to hash the passwords found in user.properties?

5. ActiveMQ supports many transports but it's my understanding that not all
of them support authorization.  Is there an exaustive list somewhere of
which transports support authorization and which do not?

thank you,

-- 
http://www.spectrumdt.com
http://codepimps.org

------=_Part_33420_26482737.1215788303423--