Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (nike.apache.org: domain of gary.tully@gmail.com designates
 209.85.216.43 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAE4bNTmBanF06woaxcCSxA++t8nqZaprr06xk6H-ieNLJxW7Rw@mail.gmail.com>
References: 
 <CAE4bNTmBanF06woaxcCSxA++t8nqZaprr06xk6H-ieNLJxW7Rw@mail.gmail.com>
Date: Tue, 4 Oct 2011 00:46:10 +0100
Message-ID: 
 <CAH+vQmO9=0mquHRZaEqNCVmYX0UdxD27gsTLQNUQ9QxOj99PqQ@mail.gmail.com>
Subject: Re: IP Based Authorization
From: Gary Tully <gary.tully@gmail.com>
To: users@activemq.apache.org
Content-Type: text/plain; charset=ISO-8859-1

The norm is a custom jaas plugin, but this would be a great feature to
have by default.
There are some good templates in the org.apache.activemq.security
package of activemq-core

all contributions gratefully accepted ;-)


On 3 October 2011 15:28, Ken Barber <ken@puppetlabs.com> wrote:
> Hi,
>
> So I'm interested in the state of IP based authorization for ActiveMQ.
> I can see some work on blacklisting in Apollo:
>
> https://issues.apache.org/jira/browse/APLO-38?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel#issue-tabs
>
> And I can see an example JAAS Plugin:
>
> http://www.javabeat.net/articles/314-building-a-custom-security-plugin-in-activemq-1.html
>
> I'm curious - Is there any JAAS Plugin developed by the ActiveMQ team
> to provide levels of IP authorization? Or is the norm here to develop
> a custom JAAS plugin?
>
> The goal here is to provide different grades of access to queues and
> topics implicitly based on IP.
>
> ken.
>


-- 
http://fusesource.com
http://blog.garytully.com