activemq-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Torsten Mielke <tors...@fusesource.com>
Subject Re: ActiveMQ LDAP Authorization Issue
Date Thu, 06 Dec 2012 08:34:34 GMT
Hello,

Not sure about your actual problem but the FuseSource Security Guide for ActiveMQ has a good
tutorial for configuring LDAP based authentication and authorization. Perhaps this can help
you? 
http://fusesource.com/docs/broker/5.5/security/LDAP.html


Perhaps this blog post is also of interest to you:
http://tmielke.blogspot.co.uk/2011/12/activemq-ldap-based-authentication-and.html

Regards,

Torsten Mielke
torsten@fusesource.com
tmielke.blogspot.com



On Dec 5, 2012, at 1:22 PM, joesan wrote:

> Guys,
> 
> I have an LDAP configuration where I have 3 users namely admin, publisher,
> consumer and I have 3 groups namely admins, consumers, publishers and I have
> 3 users namely admin, user1, user2.
> 
> I also have my destinations configured. When I try to connect to my ActiveMQ
> server, I get the following error:
> 
> *Caused by: java.lang.SecurityException: User user1 is not authorized to
> create: topic://ActiveMQ.Advisory.Connection
> 	at
> org.apache.activemq.security.AuthorizationBroker.addDestination(AuthorizationBroker.java:76)
> 	at
> org.apache.activemq.broker.MutableBrokerFilter.addDestination(MutableBrokerFilter.java:151)
> 	at
> org.apache.activemq.broker.region.RegionBroker.send(RegionBroker.java:481)
> 	at
> org.apache.activemq.broker.jmx.ManagedRegionBroker.send(ManagedRegionBroker.java:311)
> 	at
> org.apache.activemq.advisory.AdvisoryBroker.fireAdvisory(AdvisoryBroker.java:551)
> 	at
> org.apache.activemq.advisory.AdvisoryBroker.fireAdvisory(AdvisoryBroker.java:482)
> 	at
> org.apache.activemq.advisory.AdvisoryBroker.fireAdvisory(AdvisoryBroker.java:477)
> 	at
> org.apache.activemq.advisory.AdvisoryBroker.addConnection(AdvisoryBroker.java:86)
> 	at
> org.apache.activemq.broker.BrokerFilter.addConnection(BrokerFilter.java:85)
> 	at
> org.apache.activemq.broker.BrokerFilter.addConnection(BrokerFilter.java:85)
> 	at
> org.apache.activemq.broker.BrokerFilter.addConnection(BrokerFilter.java:85)
> 	at
> org.apache.activemq.security.JaasAuthenticationBroker.addConnection(JaasAuthenticationBroker.java:90)
> 	at
> org.apache.activemq.broker.BrokerFilter.addConnection(BrokerFilter.java:85)
> 	at
> org.apache.activemq.broker.MutableBrokerFilter.addConnection(MutableBrokerFilter.java:91)
> 	at
> org.apache.activemq.broker.TransportConnection.processAddConnection(TransportConnection.java:712)
> 	at
> org.apache.activemq.broker.jmx.ManagedTransportConnection.processAddConnection(ManagedTransportConnection.java:80)
> 	at
> org.apache.activemq.command.ConnectionInfo.visit(ConnectionInfo.java:139)
> 	at
> org.apache.activemq.broker.TransportConnection.service(TransportConnection.java:294)
> 	at
> org.apache.activemq.broker.TransportConnection$1.onCommand(TransportConnection.java:152)
> 	at
> org.apache.activemq.transport.MutexTransport.onCommand(MutexTransport.java:50)
> 	at
> org.apache.activemq.transport.WireFormatNegotiator.onCommand(WireFormatNegotiator.java:113)
> 	at
> org.apache.activemq.transport.AbstractInactivityMonitor.onCommand(AbstractInactivityMonitor.java:256)
> 	at
> org.apache.activemq.transport.TransportSupport.doConsume(TransportSupport.java:83)
> 	at
> org.apache.activemq.transport.tcp.SslTransport.doConsume(SslTransport.java:91)
> 	at
> org.apache.activemq.transport.tcp.TcpTransport.doRun(TcpTransport.java:222)
> 	at
> org.apache.activemq.transport.tcp.TcpTransport.run(TcpTransport.java:204)
> 	at java.lang.Thread.run(Unknown Source)*
> 
> I even have the ActiveMQ.Advisory.Connection Topic configured in my LDAP
> tree as below:
> 
> *objectClass: top
> objectClass: groupOfNames
> cn: write
> member: cn=admins
> member: cn=publishers
> member: cn=consumers*
> 
> Could you please help me as to why I get the security exception? Any ideas?
> 
> 
> 
> --
> View this message in context: http://activemq.2283324.n4.nabble.com/ActiveMQ-LDAP-Authorization-Issue-tp4660204.html
> Sent from the ActiveMQ - User mailing list archive at Nabble.com.





Mime
View raw message