Using LDAP login module

2012-02-01 Thread Chris Robison
I'm trying to use the LDAP login module to tie into Active Directory. Here's what my AMQ conf looks like: plugins jaasAuthenticationPlugin configuration=ldap-login / authorizationPlugin map authorizationMap authorizationEntries authorizationEntry queue= read=MQCoreAdmin write=MQCoreAdmin

Re: Using LDAP login module

2012-02-01 Thread Matt Pavlovich
Chris- Try adding s to the connectionProtocol value, so it'd read connectionProtocol=s. I think that's for simple, as in clear text password to auth against LDAP. Matt On 2/1/12 12:22 PM, Chris Robison wrote: I'm trying to use the LDAP login module to tie into Active Directory. Here's

Re: Using LDAP login module

2012-02-01 Thread Matt Pavlovich
My bad.. the default is s in the ActiveMQ src. This is where you would specify ssl or not. I think the problem is that you have it empty, so its parsing as NULL, and you are getting the error. Try not setting it, and see if the default works for you. On 2/1/12 12:22 PM, Chris Robison

Re: Using LDAP login module

2012-02-01 Thread Chris Robison
No good. I should note that I'm combining LDAP authenticate with simple authorization. Is that possible? Chris On Wed, Feb 1, 2012 at 12:42 PM, Matt Pavlovich mattr...@gmail.com wrote: My bad.. the default is s in the ActiveMQ src. This is where you would specify ssl or not. I think the

Re: Using LDAP login module

2012-02-01 Thread Matt Pavlovich
Are you getting the exact same exception? Your original exception cause shows a null value for a key in that config: Caused by: java.io.IOException: Configuration Error: Line 6: expected [option key], found [null] at com.sun.security.auth.login.**ConfigFile.match(ConfigFile.**java:577) at

Re: Using LDAP login module

2012-02-01 Thread Chris Robison
Yeah, it's the exact same exception. On Wed, Feb 1, 2012 at 12:55 PM, Matt Pavlovich mattr...@gmail.com wrote: Are you getting the exact same exception? Your original exception cause shows a null value for a key in that config: Caused by: java.io.IOException: Configuration Error: Line 6:

Re: Using LDAP login module

2012-02-01 Thread Matt Pavlovich
How comfortable are you with Java? The next step to try would be to write up a quick Java unit test that has the ConfigFile class try to intialize against your login.config file. See: com.sun.security.auth.login.ConfigFile On 2/1/12 1:59 PM, Chris Robison wrote: Yeah, it's the exact same

Re: Using LDAP login module

2012-02-01 Thread Chris Robison
I can do that. I'll let you know. On Wed, Feb 1, 2012 at 1:19 PM, Matt Pavlovich mattr...@gmail.com wrote: How comfortable are you with Java? The next step to try would be to write up a quick Java unit test that has the ConfigFile class try to intialize against your login.config file. See:

Re: Using LDAP login module

2012-02-01 Thread Matt Pavlovich
Chris- I whipped up a quick unit test, and this passed. I set the connectionProtocol=s, w/o quotes. ldap-login { org.apache.activemq.jaas.LDAPLoginModule required debug=true initialContextFactory=com.sun.jndi.ldap.LdapCtxFactory connectionURL=ldap://dc101.cdr.corp;

Re: Using LDAP login module

2012-02-01 Thread Chris Robison
When I run it, I still get the error. On Wed, Feb 1, 2012 at 1:32 PM, Matt Pavlovich mattr...@gmail.com wrote: Chris- I whipped up a quick unit test, and this passed. I set the connectionProtocol=s, w/o quotes. ldap-login { org.apache.activemq.jaas.**LDAPLoginModule required

Re: Using LDAP login module

2012-02-01 Thread Chris Robison
The error says line 6 which in my login.config is connectionUsername. Chris On Wed, Feb 1, 2012 at 1:42 PM, Chris Robison chrisdrobi...@gmail.comwrote: When I run it, I still get the error. On Wed, Feb 1, 2012 at 1:32 PM, Matt Pavlovich mattr...@gmail.com wrote: Chris- I whipped up a

Re: Using LDAP login module

2012-02-01 Thread Matt Pavlovich
Ah, start w/ line 0.. that puts it at connectionPassword. Try adding around Password!. The exclamation point may be throwing it off. On 2/1/12 2:47 PM, Chris Robison wrote: The error says line 6 which in my login.config is connectionUsername. Chris On Wed, Feb 1, 2012 at 1:42 PM, Chris

Re: Using LDAP login module

2012-02-01 Thread Chris Robison
Sweet! Now I'm getting an LDAP error, which is progress. On Wed, Feb 1, 2012 at 1:56 PM, Matt Pavlovich mattr...@gmail.com wrote: Ah, start w/ line 0.. that puts it at connectionPassword. Try adding around Password!. The exclamation point may be throwing it off. On 2/1/12 2:47 PM, Chris

Re: Using LDAP login module

2012-02-01 Thread Matt Pavlovich
Glad to hear :-) On 2/1/12 3:00 PM, Chris Robison wrote: Sweet! Now I'm getting an LDAP error, which is progress. On Wed, Feb 1, 2012 at 1:56 PM, Matt Pavlovichmattr...@gmail.com wrote: Ah, start w/ line 0.. that puts it at connectionPassword. Try adding around Password!. The