Re: Artemis: Restricting access based on protocol

2020-04-08 Thread brusdev
Hi Stan, the PR https://github.com/apache/activemq-artemis/pull/3058 is merged so it will be included in the 2.12.0 release. Regards, Domenico -- Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-f2341805.html

Re: Artemis: Restricting access based on protocol

2020-04-02 Thread brusdev
Hi Justin and Stan, I found another bug, testing the the MqttConnectMessage rejection: https://issues.apache.org/jira/browse/ARTEMIS-2686 I created a PR to fix this bug: https://github.com/apache/activemq-artemis/pull/3058 Regards, Domenico -- Sent from: http://activemq.2283324.n4.nabble.com/

Re: Artemis: Restricting access based on protocol

2020-04-01 Thread Justin Bertram
The problem is ARTEMIS-2607 which will be resolved in the 2.12.0 release. Justin [1] https://issues.apache.org/jira/browse/ARTEMIS-2607 On Wed, Apr 1, 2020 at 7:40 AM Stan Petrula wrote: > Hi Domenico, > > thank you for the suggestion, but unfortunately it does not work. I am > using > slight

Re: Artemis: Restricting access based on protocol

2020-04-01 Thread Stan Petrula
Hi Domenico, thank you for the suggestion, but unfortunately it does not work. I am using slightly modified interceptor code: public class MQTTLoginFilterInterceptor implements MQTTInterceptor { @Override public boolean intercept(final MqttMessage mqttMessage, RemotingConnection connection)

Re: Artemis: Restricting access based on protocol

2020-03-31 Thread brusdev
Hi Stan, Artemis supports interceptors[1] to intercept packets entering and exiting the server. This allows custom code to be executed, e.g. for auditing packets, filtering or other reasons. So you could use an MQTTInterceptor[2] to reject connection messages with admin username. An example of MQ

Artemis: Restricting access based on protocol

2020-03-31 Thread Stan Petrula
Hello, We are using admin user to manage Artemis broker using management console, so far OK. We would like to disallow admin login over MQTT protocol. Is it possible to restrict user/role access to certain connectors? -- Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-f2341805.h