Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (nike.apache.org: domain of christopher_wood@pobox.com
 designates 74.115.168.62 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=pobox.com; h=date:from:to
	:subject:message-id:references:mime-version:content-type
	:in-reply-to; q=dns; s=sasl; b=wW/ARzbGvl0kmaRbunvYRYTPf/WQ1AF7T
	qO0mKcdVqy3wL2DSeNbyt3c2HR965gT1CJ4w6NY64/NMXL0QwrtGY0zD4cwEwtdD
	azTa98N6CKSSU+BTzvWxER7XGA/OMhFpEN1LOg9IjmMkX7Y+CaKV5WSALd6Yg+z1
	qEW4ILM66I=
Date: Mon, 11 Jun 2012 11:07:46 -0400
From: Christopher Wood <christopher_wood@pobox.com>
To: users@activemq.apache.org
Subject: Re: ActiveMQ 5 - Specifying a broker's destinations in an external
 file
Message-ID: <20120611150746.GA22822@iniquitous.heresiarch.ca>
References: <1339424803016-4653166.post@n4.nabble.com>
 <20120611143921.GA22765@iniquitous.heresiarch.ca>
 <1339426815415-4653170.post@n4.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1339426815415-4653170.post@n4.nabble.com>
User-Agent: Mutt/1.5.20 (2009-06-14)

I cribbed from here:

http://activemq.apache.org/security.html#Security-LDAPAuthenticationUsingtheJAASPlugin

And my login.config file looks like this:

LdapConfiguration { 
   org.apache.activemq.jaas.LDAPLoginModule required 
       debug=true 
       initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory 
       connectionURL="ldap://ldap-lab.my.com:389" 
       connectionUsername="cn=mqbroker,ou=services,o=my" 
       connectionPassword=password
       connectionProtocol=s 
       authentication=simple 
       userBase="ou=User,ou=ActiveMQ,ou=systems,o=my" 
       userRoleName=dummyUserRoleName 
       userSearchMatching="(uid={0})" 
       userSearchSubtree=false 
       roleBase="ou=Group,ou=ActiveMQ,ou=systems,o=my" 
       roleName=cn 
       roleSearchMatching="(member:=uid={1})" 
       roleSearchSubtree=true 
       ; 
};


On Mon, Jun 11, 2012 at 08:00:15AM -0700, ndipiazza wrote:
> Christopher,
> 
> Thanks for shedding some light on this with this suggestion. So I'm
> unfortunately not super familiar with this plug-in. So in your case
> "LdapConfiguration" maps back to a configuration in activemq where
> destinations are configured to be looked up from your LDAP server? 
> 
> If you don't mind, can you please show me what the LdapConfiguration element
> looks like for your usage? That would be extremely helpful. 
> 
> -Nicholas 
> 
> --
> View this message in context: http://activemq.2283324.n4.nabble.com/ActiveMQ-5-Specifying-a-broker-s-destinations-in-an-external-file-tp4653166p4653170.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.
>