I have the same issue with Active Directory and ActiveMQ 5.15.10. The
documentation refers to a cached LDAP configuration. However, that does not
appear to be the correct solution for me. I tried other solutions, including
two login.config configurations, one for the broker and one for the Web
console. The broker is working properly, but the Web console is not. The
problem that I have with the Web console is that
org.eclipse.jetty.plus.jaas.JAASLoginService class no longer exists and I
cannot find a replacement for it.

(from jetty.xml)
    <bean id="securityLoginService"
class="org.eclipse.jetty.plus.jaas.JAASLoginService">
        <property name="name" value="ActiveMQLDAPRealm" />
        <property name="LoginModuleName" value="JettyLdapConfiguration"/>
        <property name="CallbackHandlerClass"
value="org.eclipse.jetty.plus.jaas.callback.DefaultCallbackHandler" />
        <property name="roleClassNames"
value="org.eclipse.jetty.plus.jaas.JAASRole" />
    </bean>

(from login.config)
JettyLdapConfiguration {
  org.eclipse.jetty.plus.jaas.spi.LdapLoginModule required
    debug="true"
    contextFactory="com.sun.jndi.ldap.LdapCtxFactory"
    hostname="********"
    port="3269"
    useLdaps="true"
    bindDn="CN=*****,OU=*******,OU=IntegrationServices,DC=dev,DC=local"
    bindPassword="*************"
    authenticationMethod="simple"
    forceBindingLogin="false"
    userBaseDn="DC=dev,DC=local"
    userRdnAttribute="uid"
    userIdAttribute="uid"
    userObjectClass="Person"
    roleBaseDn="(memberOf=OU=******,OU=**********,DC=dev,DC=local)"
    roleNameAttribute="cn"
    roleMemberAttribute="member"
    roleObjectClass="groupOfNames"
    authenticated="true"
    ;
};





--
Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-f2341805.html

Reply via email to