Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (nike.apache.org: domain of lists@nabble.com designates
 216.139.236.158 as permitted sender)
Message-ID: <23680389.post@talk.nabble.com>
Date: Fri, 22 May 2009 19:32:13 -0700 (PDT)
From: huntc <huntc@mac.com>
To: users@activemq.apache.org
Subject: AJAX Servlet and identity management
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


Hi there,

Is there any support within the Ajax servlet for authentication and
authorisation? I've been able to use AMQ's JAAS support within the broker
itself and wonder if this can somehow extend to the Ajax servlet.

In particular I'm interested in authenticating using mutual SSL
authentication and using LDAP to determine the groups available to the
certificate's subject for authorisation. These groups are then used within
the Authorization Plugin to determine which queues/topics are accessible.

I have achieved the desired authentication and authorisation via
connectivity with the broker directly but would now like to consider the
same level of identity management for my AJAX applications.

Thanks for any guidance.

Kind regards,
Christopher

P.S. I'm wondering if the AJAX support should be built into the broker
directly... I would imagine that the AJAX servlet could provide a popular
means of broker connectivity... or should I be looking at the
connection-oriented STOMP instead of the AJAX servlet?
-- 
View this message in context: http://www.nabble.com/AJAX-Servlet-and-identity-management-tp23680389p23680389.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.