Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (athena.apache.org: domain of chubrilo@gmail.com designates
 209.85.161.43 as permitted sender)
MIME-Version: 1.0
Sender: chubrilo@gmail.com
In-Reply-To: 
 <CAAnCuG8Wk8+yNnrthxUQ4a40uAYx8S52vAKDbOwaT7HPcAnV1A@mail.gmail.com>
References: 
 <CAAnCuG8Wk8+yNnrthxUQ4a40uAYx8S52vAKDbOwaT7HPcAnV1A@mail.gmail.com>
Date: Thu, 18 Aug 2011 11:35:10 +0200
Message-ID: 
 <CAGeh-pF0SS06JjBr86mp8JiMiQzu4Hb8RqpFjG2Dw_xVCN0DPg@mail.gmail.com>
Subject: Re: Per-transportconnector authentication
From: Dejan Bosanac <dejan@nighttale.net>
To: users@activemq.apache.org
Content-Type: multipart/alternative; boundary=20cf3054a5b146179f04aac45405

--20cf3054a5b146179f04aac45405
Content-Type: text/plain; charset=ISO-8859-1

We don't have that at the moment. The closest thing there is to that is Jaas
dual plugin, which uses certificates to authenticate ssl connections and
user/pass for plain ones.

It shouldn't be hard to implement it. If you want to give it a try take a
look at current plugins

https://fisheye6.atlassian.com/browse/activemq/trunk/activemq-core/src/main/java/org/apache/activemq/security


Regards
-- 
Dejan Bosanac - http://twitter.com/dejanb
-----------------
The experts in open source integration and messaging - http://fusesource.com
ActiveMQ in Action - http://www.manning.com/snyder/
Blog - http://www.nighttale.net


On Thu, Aug 18, 2011 at 11:01 AM, John Fletcher <fletchgqc@gmail.com> wrote:

> I have an ActiveMQ instance with transport connectors as follows:
> <transportConnector name="local" uri="tcp://localhost:61616"/>
> <transportConnector name="ssl" uri="ssl://0.0.0.0:61617"/>
>
> Is it possible to require authentication on the ssl connector but allow
> anonymous authentication on the local connector? I don't have complicated
> authorisation rules, I could just give admin access to anyone who
> successfully connects by either route.
>
> John
>

--20cf3054a5b146179f04aac45405--