Return-Path: X-Original-To: apmail-activemq-users-archive@www.apache.org Delivered-To: apmail-activemq-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 8CE389E2C for ; Mon, 3 Oct 2011 14:28:41 +0000 (UTC) Received: (qmail 82970 invoked by uid 500); 3 Oct 2011 14:28:41 -0000 Delivered-To: apmail-activemq-users-archive@activemq.apache.org Received: (qmail 82926 invoked by uid 500); 3 Oct 2011 14:28:41 -0000 Mailing-List: contact users-help@activemq.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@activemq.apache.org Delivered-To: mailing list users@activemq.apache.org Received: (qmail 82918 invoked by uid 99); 3 Oct 2011 14:28:41 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Oct 2011 14:28:41 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of ken@puppetlabs.com designates 209.85.210.171 as permitted sender) Received: from [209.85.210.171] (HELO mail-iy0-f171.google.com) (209.85.210.171) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 03 Oct 2011 14:28:33 +0000 Received: by iagv1 with SMTP id v1so6677693iag.2 for ; Mon, 03 Oct 2011 07:28:12 -0700 (PDT) MIME-Version: 1.0 Received: by 10.231.82.12 with SMTP id z12mr5249ibk.36.1317652092628; Mon, 03 Oct 2011 07:28:12 -0700 (PDT) Received: by 10.231.15.198 with HTTP; Mon, 3 Oct 2011 07:28:12 -0700 (PDT) Date: Mon, 3 Oct 2011 07:28:12 -0700 Message-ID: Subject: IP Based Authorization From: Ken Barber To: users@activemq.apache.org Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org Hi, So I'm interested in the state of IP based authorization for ActiveMQ. I can see some work on blacklisting in Apollo: https://issues.apache.org/jira/browse/APLO-38?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs And I can see an example JAAS Plugin: http://www.javabeat.net/articles/314-building-a-custom-security-plugin-in-activemq-1.html I'm curious - Is there any JAAS Plugin developed by the ActiveMQ team to provide levels of IP authorization? Or is the norm here to develop a custom JAAS plugin? The goal here is to provide different grades of access to queues and topics implicitly based on IP. ken.