C++ broker SSL authentication and ACL

2016-05-25 Thread Domen Vrankar
Hi, Is it possible to write ACL so that it takes into account both certificate common name and ca certificate that issued it when granting access rights? What I'm trying to do: I'm using SSL authentication and ACL with C++ qpid broker like this: - On broker side I have acl file with @QPID entrie

Re: [C++ broker] temporary queues and ACL ussage

2016-03-16 Thread Domen Vrankar
2016-03-14 15:08 GMT+01:00 Chuck Rolke : > C++ Broker ACL does not deal well with the autogenerated queue names. Fortunately changes to the code are minimal :) > You may try using ACL to limit users to creating/accessing only one > autodelete queue that is prefixed with the user name. This keeps

[C++ broker] temporary queues and ACL ussage

2016-03-14 Thread Domen Vrankar
Hi, I'm using qpid C++ 0.34 with SSL authentication. I have a mixture of durable and temporary queues and am trying to limit the access with ACL. All users have access to a single exchange for sending message but only some users have permission to read from one or more queues connected to that e

Re: qpid cpp 0.34 get sender user Id on receiver side when using SSL authentication

2016-03-08 Thread Domen Vrankar
>> Next I wanted to get user Id from connection >> (connection_.getAuthenticatedUsername()) but I always got "dummy" >> string. I traced that to SslConnector.cpp (getSecuritySettings >> function) where the string is hardcoded. Is there a way to get user id >> (certificate nickname) from this functi

qpid cpp 0.34 get sender user Id on receiver side when using SSL authentication

2016-03-07 Thread Domen Vrankar
Hi, I'm using qpid C++ 0.34 both for broker and client. For authentication I'm using SSL without encryption. What I'm trying to do is to set user Id on every sent message: qpid_message.setUserId(connection_.getAuthenticatedUsername()); Reason for this is that I'd like to know on the receiver side