I'm trying to implement some security on queues for Stomp clients.  I have 
this config:

  <plugins>
    <jaasAuthenticationPlugin configuration="activemq-domain" />

    <authorizationPlugin>
        <map>
          <authorizationMap>
            <authorizationEntries>
              <authorizationEntry queue=">" read="admins" write="admins" 
admin="admins" />
              <authorizationEntry queue="vps" read="admins" write="admins" 
admin="admins" />
              <authorizationEntry queue="USERS.>" read="users" write="users" 
admin="users" />
            </authorizationEntries>
          </authorizationMap>
        </map>
    </authorizationPlugin>

  </plugins>



and user.properties 

system=manager
user=password
guest=password


and group.properties:

group.properties


And I added 
"-Djava.security.auth.login.config=${ACTIVEMQ_BASE}/conf/login.conf" to the 
startup options.


  But I can still can login with Stomp, with any username and password, and get 
messages.


Tom

Reply via email to