Also— this document shows how to limit the queries and get rid of objectClass=* 
style queries:

https://activemq.apache.org/components/classic/documentation/security

Thanks,
Matt Pavlovich

> On Sep 25, 2024, at 5:01 PM, Matt Pavlovich <mattr...@gmail.com> wrote:
> 
> Hi Jason-
> 
> Sounds like you have some misconfiguration — either clients are connecting 
> and sending one-message-per-connection, and/or you should add LDAP Connection 
> Pooling settings.
> 
> Thanks,
> Matt Pavlovich
> 
>> On Sep 25, 2024, at 3:45 PM, Jason Jackson 
>> <jason.jack...@itechag.com.INVALID> wrote:
>> 
>> I have ActiveMQ classic configured to use LDAP for permissions and 
>> authorizations.
>> 
>> Our LDAP server is being flooded with numerous LDAP queries and it is 
>> consuming all of the resources.
>> 
>> I have added the following entries to my login.config file and none of these 
>> appear to have helped
>> 
>> storePass="true"
>> tryFirstPass="true"
>> cachDurationMillis="1000000"
>> 
>> userObjectClass="inetOrgPerson"
>> roleObjectClass="groupOfUniqueNames"
>> 
>> With all of the entries/settings our LDAP logs are showing a ton of entries 
>> with the following search string
>> 
>> objectClass=*
>> 
>> Does anyone have any suggestions of a setting that should be implemented to 
>> prevent the numerous calls being made to LDAP?
>> 
>> 
>> Jason
>> 
>> 
>> 
> 

Reply via email to