Mailing-List: contact users-help@qpid.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@qpid.apache.org
Received-SPF: pass (nike.apache.org: domain of fraser.adams@blueyonder.co.uk
 designates 81.103.221.47 as permitted sender)
Message-ID: <4E8F3E2C.1040905@blueyonder.co.uk>
Date: Fri, 07 Oct 2011 19:00:12 +0100
From: Fraser Adams <fraser.adams@blueyonder.co.uk>
User-Agent: Thunderbird 2.0.0.24 (X11/20101027)
MIME-Version: 1.0
To: users@qpid.apache.org
Subject: Re: Is it possible to set authentication to only authenticate
 consumers?
References: 
 <CAECqq8qC+3YdjS3euX+9mVwEpuf5QRWyx3mXE7wZpPr_sbgZTA@mail.gmail.com>
	<4E72452A.50709@blueyonder.co.uk>
	<CAECqq8q47w39PXKi+N_Sxr2ztinhx19+XGWCtKvmhpOCaUgNRQ@mail.gmail.com>
	<4E7308E3.7080804@blueyonder.co.uk>
 <CAECqq8paCiu6E8-zv4Qxsb05XzEYZQDMsO=0O=HVHSyufO1_sw@mail.gmail.com>
 <4E734780.30509@blueyonder.co.uk> <4E737ECC.2020509@redhat.com>
 <4E85EB31.5070602@blueyonder.co.uk> <4E89F3E9.9040601@blueyonder.co.uk>
 <4E8C1A2D.6080902@redhat.com> <4E8EDDF2.2010200@blueyonder.co.uk>
 <4E8EEB44.8030901@redhat.com> <4E8EF79F.8090609@blueyonder.co.uk>
 <4E8F2628.90907@redhat.com> <4E8F2DD8.9080704@blueyonder.co.uk>
 <4E8F3BEB.1080307@redhat.com>
In-Reply-To: <4E8F3BEB.1080307@redhat.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Gordon Sim wrote:
> On 10/07/2011 05:50 PM, Fraser Adams wrote:
>> What I'd quite like to be able to do is to log, but not deny if a queue
>> is created that's not one of a named set. I'm suspecting that I can't do
>> that with acl and I might have to write a QMF client to do that.
>
> I think you are right, QMF may be the simplest way to go. You can 
> quite easily get events sent out for queue creation and could then 
> check the name against an expected set and log any deviation.
Yeah, I suspect that it ought to be pretty easy to do this using 
qpid-printevents as a starting point. I've just had a quick look and I 
suspect that the only slight gotcha is to cope with the case where the 
broker gets restarted and a connection is made straight after. In this 
case qpid-printevents was only showing its own bind events. I suspect if 
I intercept the bind to the qpid.management exchange and use that to 
trigger a getObjects() for all queues/bindings/exchanges to cover that 
edge case.

Thanks for all your help yet again!!
Frase

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org