Return-Path: X-Original-To: apmail-activemq-users-archive@www.apache.org Delivered-To: apmail-activemq-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 045E1F1FA for ; Wed, 29 May 2013 15:49:28 +0000 (UTC) Received: (qmail 6137 invoked by uid 500); 29 May 2013 15:49:27 -0000 Delivered-To: apmail-activemq-users-archive@activemq.apache.org Received: (qmail 6056 invoked by uid 500); 29 May 2013 15:49:27 -0000 Mailing-List: contact users-help@activemq.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@activemq.apache.org Delivered-To: mailing list users@activemq.apache.org Received: (qmail 6043 invoked by uid 99); 29 May 2013 15:49:27 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 May 2013 15:49:27 +0000 X-ASF-Spam-Status: No, hits=1.5 required=5.0 tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of codecraig@gmail.com designates 209.85.219.51 as permitted sender) Received: from [209.85.219.51] (HELO mail-oa0-f51.google.com) (209.85.219.51) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 29 May 2013 15:49:23 +0000 Received: by mail-oa0-f51.google.com with SMTP id f4so11672246oah.24 for ; Wed, 29 May 2013 08:49:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=OynA75jEtgCH0mjhTwWQg03FQq00PkehZRX+Jy7xksY=; b=SACnnN9/SgjpD9HWbMDjt/WTh5M2GH0W1AYTU3DmLXSLFwEeM2wKfU959OVpQDQ2lw KfFjEJbBl8SLeE1bIVQirprIyoas+GXLGYvBMoaE34cy5TAtLT5mgGpyww+o01em75V+ GvdC7nzpXNF97Z+xZH9Hylvy1zytuH7hsiC357G03s2KKp2PoWNQoxvwgJvKs3uC2btP cKHOkuWazNKtX+TTH3m/FA0AaB0NNaJ3BJCGoKBvfBHvYWmEf57cNpynAqJVW3JldKO2 zKTAlU2uwOklV9+bUbNVP+HL6QiCXoh9CNHmsLTXdHXnzSSw/ulnzcaywtr0CRoccBYL YQHQ== MIME-Version: 1.0 X-Received: by 10.182.74.194 with SMTP id w2mr1088605obv.40.1369842542567; Wed, 29 May 2013 08:49:02 -0700 (PDT) Received: by 10.76.143.234 with HTTP; Wed, 29 May 2013 08:49:02 -0700 (PDT) In-Reply-To: References: Date: Wed, 29 May 2013 11:49:02 -0400 Message-ID: Subject: Re: Apply login module to certain channels From: craig w To: users@activemq.apache.org Content-Type: multipart/alternative; boundary=001a11c238a825ed3904dddd529f X-Virus-Checked: Checked by ClamAV on apache.org --001a11c238a825ed3904dddd529f Content-Type: text/plain; charset=ISO-8859-1 Sorry for the confusion, but I'm using Apollo (I didn't realize it was the same email list as AMQ). Your suggestion looks like it might be promising however the page you linked to has this error in the "Authorization" section: Error formatting macro: snippet: java.lang.IndexOutOfBoundsException: Index: 20, Size: 20 So I can't see the code snippet. Also the link to the JASS broker xml file (in the Authorization section as well) isn't working either. I'll keep digging around, anonymous access might be the ticket...I just have to see if Apollo has something similar. On Wed, May 29, 2013 at 11:33 AM, Dejan Bosanac wrote: > Hi, > > take a look at "anonymous access" > > http://activemq.apache.org/security.html#Security-Anonymousaccess > > After setting it up, you need to define authorisation roles as well, to > define which destination can be accessed by anonymous users/groups. > > > Regards > -- > Dejan Bosanac > ---------------------- > Red Hat, Inc. > FuseSource is now part of Red Hat > dbosanac@redhat.com > Twitter: @dejanb > Blog: http://sensatic.net > ActiveMQ in Action: http://www.manning.com/snyder/ > > > On Tue, May 28, 2013 at 7:33 PM, craig w wrote: > > > Is it possible to configure a login module such that it only affects > > certain destinations (topics/queues)? For some destinations I'd like to > > require username/password, some others I'd like to require client > > certificates. > > > > Meanwhile I have some other channels that don't need username/password > auth > > or client certificates at all. > > > --001a11c238a825ed3904dddd529f--