Return-Path: X-Original-To: apmail-activemq-users-archive@www.apache.org Delivered-To: apmail-activemq-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 224181779E for ; Mon, 15 Jun 2015 13:17:15 +0000 (UTC) Received: (qmail 19250 invoked by uid 500); 15 Jun 2015 13:17:14 -0000 Delivered-To: apmail-activemq-users-archive@activemq.apache.org Received: (qmail 19210 invoked by uid 500); 15 Jun 2015 13:17:14 -0000 Mailing-List: contact users-help@activemq.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@activemq.apache.org Delivered-To: mailing list users@activemq.apache.org Received: (qmail 19199 invoked by uid 99); 15 Jun 2015 13:17:14 -0000 Received: from Unknown (HELO spamd2-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 15 Jun 2015 13:17:14 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd2-us-west.apache.org (ASF Mail Server at spamd2-us-west.apache.org) with ESMTP id 1A63C1A5674 for ; Mon, 15 Jun 2015 13:17:14 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd2-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.99 X-Spam-Level: *** X-Spam-Status: No, score=3.99 tagged_above=-999 required=6.31 tests=[HTML_MESSAGE=3, KAM_LAZY_DOMAIN_SECURITY=1, T_RP_MATCHES_RCVD=-0.01] autolearn=disabled Received: from mx1-us-west.apache.org ([10.40.0.8]) by localhost (spamd2-us-west.apache.org [10.40.0.9]) (amavisd-new, port 10024) with ESMTP id lpZUU2G2PbyZ for ; Mon, 15 Jun 2015 13:17:07 +0000 (UTC) Received: from mail-gw-06.oit.duke.edu (smtp-gw-06.oit.duke.edu [152.3.189.232]) by mx1-us-west.apache.org (ASF Mail Server at mx1-us-west.apache.org) with ESMTPS id 0C0E2216F0 for ; Mon, 15 Jun 2015 13:17:07 +0000 (UTC) Received: from mail-gw-06.oit.duke.edu (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id D34821DB2148_57ED04AB for ; Mon, 15 Jun 2015 13:16:58 +0000 (GMT) Received: from EX-HUB-04.win.duke.edu (ex-hub-04.oit.duke.edu [10.136.225.16]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client CN "exchange.oit.duke.edu", Issuer "InCommon RSA Server CA" (verified OK)) by mail-gw-06.oit.duke.edu (Sophos Email Appliance) with ESMTPS id 83C6D1D138AF_57ED04AF for ; Mon, 15 Jun 2015 13:16:58 +0000 (GMT) Received: from na01-by2-obe.outbound.protection.outlook.com (207.46.163.243) by exchange.oit.duke.edu (10.136.225.16) with Microsoft SMTP Server (TLS) id 14.3.146.0; Mon, 15 Jun 2015 09:16:58 -0400 Received: from SN1PR0501MB1837.namprd05.prod.outlook.com (10.163.131.148) by SN1PR0501MB1840.namprd05.prod.outlook.com (10.163.131.150) with Microsoft SMTP Server (TLS) id 15.1.190.14; Mon, 15 Jun 2015 13:16:55 +0000 Received: from SN1PR0501MB1837.namprd05.prod.outlook.com ([10.163.131.148]) by SN1PR0501MB1837.namprd05.prod.outlook.com ([10.163.131.148]) with mapi id 15.01.0190.013; Mon, 15 Jun 2015 13:16:56 +0000 From: Shilen Patel To: "users@activemq.apache.org" Subject: Performance issues regarding authentication Thread-Topic: Performance issues regarding authentication Thread-Index: AQHQp22NKHlrU5bUtEWpHCgtEgRQgQ== Date: Mon, 15 Jun 2015 13:16:56 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.5.141003 authentication-results: activemq.apache.org; dkim=none (message not signed) header.d=none; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [152.3.2.16] x-microsoft-exchange-diagnostics: 1;SN1PR0501MB1840;3:mwtO+8aELAH9zkEicpT5MAnOZ730rkHLUb2mEabS2/3gX6A52f9p8lOfNpAfpD5V62wQRUPG7p0U1wZw6TkZ57Byu/ws1P5buzKF0LoPtrOlxasR5rkFfSbgDohJdY/OuvXm9XCnR8ciJY7+elMpgw==;10:LdZGpeP5yp0HkoD1etdoakwnc2c12L+lqqK6F/1kXWNr86w/xVYBjqomZzd5D1ueV2r4+GtAo3aHQ4wverPNaFifk/4j2WuWW8xfXITEr0U=;6:QXRbfB4Ev8mBXCtx8pUrJd/gbNS78JWDWIaHsKBijGBoxG3LtfEJa+j9jqhQGbnB x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR0501MB1840; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(601004)(520003)(5005006)(3002001);SRVR:SN1PR0501MB1840;BCL:0;PCL:0;RULEID:;SRVR:SN1PR0501MB1840; x-forefront-prvs: 0608DEDB67 x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(6009001)(40100003)(2351001)(5002640100001)(50986999)(102836002)(16236675004)(77096005)(46102003)(89122001)(19580395003)(122556002)(87936001)(229853001)(2656002)(86362001)(54356999)(4001350100001)(99286002)(2501003)(106116001)(77156002)(62966003)(450100001)(110136002)(5001960100002)(107886002)(189998001)(92566002)(83506001)(75432002)(88552001)(36756003)(66066001)(90282001);DIR:OUT;SFP:1102;SCL:1;SRVR:SN1PR0501MB1840;H:SN1PR0501MB1837.namprd05.prod.outlook.com;FPR:;SPF:None;MLV:sfv;LANG:en; Content-Type: multipart/alternative; boundary="_000_D1A44884CF48Ashilendukeedu_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2015 13:16:56.2497 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: cb72c54e-4a31-4d9e-b14a-1ea36dfac94c X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR0501MB1840 X-OriginatorOrg: duke.edu --_000_D1A44884CF48Ashilendukeedu_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi folks, I'm running 5.11.1 and trying to get ActiveMQ to authenticate users against= an LDAP via JAAS. I'm trying out org.apache.activemq.jaas.LDAPLoginModule= but noticing a couple of issues. First, it doesn't seem to re-use LDAP connections (i.e. pooling) and on top= of that, it doesn't seem to close connections that it creates (until they = eventually timeout due to idling). Second, there's no caching. So the result that I'm seeing is if I send 100,000 messages (via the REST A= PI in this particular case) and I authenticate as the same user each time, = then that ends up authenticating the user 100K times against the LDAP using= 100K different LDAP connections and without closing any of the 100K connec= tions. What am I missing? Is there a better way to authenticate users aga= inst an LDAP? Thanks! - Shilen --_000_D1A44884CF48Ashilendukeedu_--