-
1. Re: Custom SecurityManager for HornetQ in Jboss AS
jbertram Apr 17, 2013 11:38 AM (in response to mybrandnewusername)1 of 1 people found this helpfulI don't believe there is a way to change the security manager for HornetQ in AS7. What is your use-case?
-
2. Re: Custom SecurityManager for HornetQ in Jboss AS
mybrandnewusername Apr 17, 2013 11:46 AM (in response to jbertram)Thanks for reply. I have custom login module in my AS 7. It works fine for JNDI and EJB. I want to use that login module for hornetq as well.
-
3. Re: Custom SecurityManager for HornetQ in Jboss AS
jbertram Apr 17, 2013 11:52 AM (in response to mybrandnewusername)Is it a JAAS login module? If so, you can simply specify a different <security-domain> and configure your JAAS login module in standalone*.xml. You shouldn't need to change the entire security manager.
To be clear, I took a look at the code and there isn't a way to change the security manager.
-
4. Re: Custom SecurityManager for HornetQ in Jboss AS
mybrandnewusername Apr 23, 2013 6:06 AM (in response to jbertram)Thanks again! Please, answer one more question on Hornet+Jboss AS security, if you'd have some time.
I do not use Jboss AS users and their roles, because I have some custom permission checks in my applications. Am I bound to use jboss role based security model (<security-setting> and <permission ... roles="somerole"/>) for JMS? Can I do it programatically, not declaratively?
-
5. Re: Custom SecurityManager for HornetQ in Jboss AS
jbertram Apr 23, 2013 3:21 PM (in response to mybrandnewusername)HornetQ security is based on users and roles so you're "locked in" to that if that's what you're asking. However, you are free to implement your own JAAS login module so you can do extra programatic checks if you so desire.
-
6. Re: Custom SecurityManager for HornetQ in Jboss AS
mybrandnewusername Apr 24, 2013 8:33 AM (in response to jbertram)It's clear now. We're going to try to create our own security manager from JBossASSecurityManager from integration project. If we'll create something usefull, I'll commit to hornetQ.
-
7. Re: Custom SecurityManager for HornetQ in Jboss AS
jbertram Apr 24, 2013 9:29 AM (in response to mybrandnewusername)As I indicated before, there's no way to change the HornetQ security manager implementation in AS7 so even if you created your own security manager you'd still have to modify/rebuild AS7 in order to use it.
-
8. Re: Custom SecurityManager for HornetQ in Jboss AS
mybrandnewusername Apr 24, 2013 9:38 AM (in response to jbertram)Yes, it is important notice. But we understand, that we'll have to rebuild AS7.