Re: Is it possible to use Client Certs for Authentication/Authorization for Apollo?

Wed, 10 Jul 2013 06:59:08 -0700

I have been looking at the documentation in the security section.

http://activemq.apache.org/apollo/documentation/user-manual.html#Security

I need to write code that will capture allow a queue to be created with the same name as the user.  That user may then be allowed to receive and consume messages.

Any hints about where i could inject this into the code?

Thanks

On Jul 08, 2013, at 02:06 PM, Christian Posta <[email protected]> wrote:

Should be the distinguished name from the X509 cert:

http://docs.oracle.com/javase/6/docs/api/javax/security/auth/x500/X500Principal.html


On Mon, Jul 8, 2013 at 1:31 PM, Garry Watkins <[email protected]> wrote:

Ok, now that I know that I can do that.
How does Apollo assign the username? What I want to do is have another
process create a queue just for that user, and that is the only queue that
user may access.
Thanks for the speedy response.
On Jul 8, 2013, at 1:28 PM, Christian Posta <[email protected]>
wrote:
> Yep, try adding the following to your ssl connector:
>
> <connector id="default" bind="ssl://0.0.0.0:61614">
>
> *<ssl client_auth="need" />*
>
> </connector>
>
>
> On Mon, Jul 8, 2013 at 12:51 PM, Garry Watkins <[email protected]> wrote:
>
>> Is it possible to use Client Certs for Authentication/Authorization for
>> Apollo?
>
>
>
>
> --
> *Christian Posta*
> http://www.christianposta.com/blog
> twitter: @christianposta


--
*Christian Posta*
http://www.christianposta.com/blog
twitter: @christianposta

Reply via email to