Mailing-List: contact users-help@activemq.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@activemq.apache.org
Received-SPF: pass (athena.apache.org: domain of chirino@gmail.com designates
 209.85.220.172 as permitted sender)
MIME-Version: 1.0
Sender: chirino@gmail.com
In-Reply-To: <44e3958c-3f27-4582-ab72-be42a81b09f4@me.com>
References: 
 <CAKS7T5N1EK=xJuT_X5PGT=7Qgmc4mEb14UY3dX37pK-QN5dmVg@mail.gmail.com>
	<44e3958c-3f27-4582-ab72-be42a81b09f4@me.com>
Date: Wed, 10 Jul 2013 15:00:00 -0400
Message-ID: 
 <CAGZ-RDKXVJy=1_sYtdZ7QLaWj_TQgywAX7kYf8C1wVAboSWyEA@mail.gmail.com>
Subject: Re: Is it possible to use Client Certs for
 Authentication/Authorization
 for Apollo?
From: Hiram Chirino <hiram@hiramchirino.com>
To: users <users@activemq.apache.org>
Content-Type: text/plain; charset=ISO-8859-1

An the user names are dynamic?  You don't know them ahead of time?

On Tue, Jul 9, 2013 at 4:14 PM, Garry Watkins <catshow@icloud.com> wrote:
> I have been looking at the documentation in the security section.
>
> http://activemq.apache.org/apollo/documentation/user-manual.html#Security
>
> I need to write code that will capture allow a queue to be created with the
> same name as the user.  That user may then be allowed to receive and consume
> messages.
>
> Any hints about where i could inject this into the code?
>
> Thanks
>
>
> On Jul 08, 2013, at 02:06 PM, Christian Posta <christian.posta@gmail.com>
> wrote:
>
> Should be the distinguished name from the X509 cert:
>
> http://docs.oracle.com/javase/6/docs/api/javax/security/auth/x500/X500Principal.html
>
>
> On Mon, Jul 8, 2013 at 1:31 PM, Garry Watkins <catshow@me.com> wrote:
>
> Ok, now that I know that I can do that.
>
> How does Apollo assign the username? What I want to do is have another
>
> process create a queue just for that user, and that is the only queue that
>
> user may access.
>
> Thanks for the speedy response.
>
> On Jul 8, 2013, at 1:28 PM, Christian Posta <christian.posta@gmail.com>
>
> wrote:
>
>> Yep, try adding the following to your ssl connector:
>
>>
>
>> <connector id="default" bind="ssl://0.0.0.0:61614">
>
>>
>
>> *<ssl client_auth="need" />*
>
>>
>
>> </connector>
>
>>
>
>>
>
>> On Mon, Jul 8, 2013 at 12:51 PM, Garry Watkins <catshow@me.com> wrote:
>
>>
>
>>> Is it possible to use Client Certs for Authentication/Authorization for
>
>>> Apollo?
>
>>
>
>>
>
>>
>
>>
>
>> --
>
>> *Christian Posta*
>
>> http://www.christianposta.com/blog
>
>> twitter: @christianposta
>
>
>
> --
> *Christian Posta*
> http://www.christianposta.com/blog
> twitter: @christianposta


-- 
Hiram Chirino

Engineering | Red Hat, Inc.

hchirino@redhat.com | fusesource.com | redhat.com

skype: hiramchirino | twitter: @hiramchirino

blog: Hiram Chirino's Bit Mojo