Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (nike.apache.org: local policy)
Date: Thu, 1 Nov 2012 16:28:24 -0400
From: rektide <rektide@voodoowarez.com>
To: users@activemq.apache.org
Subject: Re: Using Apollo with LDAP/Active Directory
Message-ID: <20121101202824.GD18490@eldergods.com>
References: <1351787598502-4658601.post@n4.nabble.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <1351787598502-4658601.post@n4.nabble.com>
User-Agent: Mutt/1.5.21 (2010-09-15)

Hey Luis;

I don't have any experience with this topic, but I'd be interested in trying to replicate
your progress & see for myself if I can surmount this. Is there anything particular you had
to do for LdapLoginModule? If you can push a sanitized configuration that you're using to
the list, that would be a great starting place for me, and I'd love see how far I can get.

Cheers,
M

On Thu, Nov 01, 2012 at 09:33:18AM -0700, Luis Gonzalez wrote:
> Hi,
> 
> I have been trying to configure Apollo to use Active Directory through LDAP
> for authentication and group membership, much like the default file-based
> configuration works.
> 
> I managed to configure authentication using
> com.sun.security.auth.module.LdapLoginModule, but I'm missing group
> membership and I don't see how to configure that module so it knows what to
> do.
> 
> org.apache.activemq.jaas.LDAPLoginModule has options for querying the groups
> but I haven't been able to get it to talk to Active Directory.
> 
> So the questions are:
> 
> - Is org.apache.activemq.jaas.LDAPLoginModule the right LoginModule to use
> for LDAP in Apollo?
> 
> - Are there other LoginModules better suited for this?