RE: OpenJms and Security

Cool! I've only had a quick glance but it looks promising.

Given the minimal schema changes, this could go into the 0.7.6 release.
We'd need to provide SQL scripts to add the new table and index, and update
the schema version no.

At this stage, I'm not too concerned about username and password being
transferred in plaintext, as the tcps or https connectors can be used if
this is an issue. However, it shouldn't be difficult to plugin encryption.

JDBM support is not required, as its being dropped post 0.7.6.

I'll have an in depth look at it tomorrow.

Regards,

Tim

  -----Original Message-----
  From: openjms-developer-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
[mailto:openjms-developer-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org]On Behalf Of Knut at
work
  Sent: Wednesday, 23 July 2003 4:10 AM
  To: openjms-developer-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
  Subject: [openjms-developer] OpenJms and Security


  Hello!

  I have developed a solution for authentication of users in OpenJMS.

  This is just a very first 'shot' and I would be pleased if any of you guys
who knows the code would be so kind to have a look. I have only studied the
source for a couple of days so maybe ive choosed some stupid solutions :-)

  Limitations:
  -By the time only authentication of user/password, nothing for Acl against
Queue/Topic.
  -username/password are beeing transferd from client to server in plaintext
  -Only implemented for the TCP-connector
  -Only impl. for RDBMS and tested against MySql


  The source is taken from the openjms-0.7.5-src.

  Howto:
  unpack openjms-0.7.5-src.zip
  Unpack the src.zip to ../main/.. in openjms-0.7.5-src catalog
  Unpack the config.zip to ../config in openjms-0.7.5-src catalog
  and build.

  Add suitable drivers for the DB
  and run.

  openjms.xml
  -------------------
  if you set <SecurityConfiguration enableSecurity="false"/> openjms should
behave ex. as before (i hope....)


  Knut