Does ActiveMQ support NTLM authentication? - activemq

New to ActiveMQ and didn’t find any information whether ActiveMQ supports NTLM authentication or not by explicitly searching for documentation related to configuring it to use NTLM.
Could anyone please advise where I can find any information about supported authentication types by ActiveMQ?

ActiveMQ does not support NTLM out of the box. However, ActiveMQ integrates with JAAS and supports pluggable login modules so you could theoretically still get the support you need.

Related

Cluster authentication

According to this documentation -> https://apacheignite.readme.io/docs/advanced-security, it's said that the authentication mechanism only applies to JDBC connections.
Here is our scenario, we don't need any security per connection from client to server but, we want all clients to authenticate before entering the server topologies which will happen when doing this -> Ignition.getOrStart(CFG).
Is there any way we achieve this?
Take a look at: https://www.gridgain.com/docs/latest/administrators-guide/security/authentication
You have the option of building your own security plugin as detailed in the Authorization
section of the url you mentioned: https://apacheignite.readme.io/docs/advanced-security#section-authorization
More info here: https://www.gridgain.com/docs/latest/administrators-guide/security/custom-authenticators

Authentication over Kerberos in ActiveMQ (embedded in Spring Boot)

I'm looking for a solution from title.
I have ActiveMQ broker embedded in Spring Boot application.
What I want to do is to authenticate some domain technical users (dedicated for some applications) over Kerberos. I know there is solution for LDAP authentication but I need Kerberos authentication.
Is there any possibility to do so?
Is there any possibility to do so using spring-security?
Could you explain how to do this?
I'm actualy stuck on this.
Thanks for all your answers!

Riak CS LDAP authentication

I read here that Riak CS supports LDAP for authentication: http://bit.ly/1Rb2yTF
"Pluggable Authentication/Authorization for Integration with Existing Infrastructure – Riak CS provides an extensible authentication system, enabling integration with existing directory services (LDAP, ActiveDirectory, NIS, PAM)."
However I cannot find anything relating to the LDAP authentication configuration in the docs. I understand the Riak CS docs may sometimes lag behind the actual features implementation.
My question is: does the feature exist out of the box, or does the white paper only refer to the possibility of rolling out my own custom authentication module if I so desire? If there is an implementation I would be grateful if you could post some information to get me started please.
I don't know what the doc supposed but, as far as I know, keystone authentication feature may be used.
Riak CS (should) support keystone authentication [1] and keystone auth can be configured to use LDAP [2] [3].
[1] http://docs.basho.com/riakcs/latest/cookbooks/Using-Riak-CS-With-Keystone/
[2] http://docs.basho.com/riakcs/latest/cookbooks/Keystone-Conf-Sample/
[3] http://docs.openstack.org/developer/keystone/configuration.html
P.S. Keystone cooperation is not widely used, so there may be some bugs. For the case, riak-users mailing list is good place to discuss.

Implementing PicketLink as iDP in Weblogic

Excuse my ignorance but can PicketLink be implemented as an IDP within weblogic?
I am looking to create a light weight IDP Proxy to be able to accept SAML requests and issue SAML Assertions based on simple authentication handled elsewhere so not looking for anything that provides too much.
I wondered if picketlink offered a simple API to do this and whether it would work on a welbogic domain.
Weblogic has its own, built-in SAML implementation that is tightly integrated with the rest of their platform. It is fully configurable from their admin console. Use that instead of PicketLink.
http://docs.oracle.com/cd/E28280_01/web.1111/e13707/saml.htm#SECMG252

Secure authentication in jboss portal

I am developing a Portal application and using jboss portal for this purpose. My current application authenticates the user from jboss DB, using the j_security_check servlet with username and password as POST parameters.
Now, if I use firebug or any HTTP monitor, then I can see the username and password, which is a security issue.
What is the better and secure way of authentication in jboss?
Securing web applications is a vast subject. It entirely depends on your needs.
From your post, what you want (to start with) is a secure communication. You can use SSL with JBoss to ensure a secure channel. I recommend you to take a look at the JBoss security documentation. I am sure you will have more concrete doubts / concerns when you start working with it - then we will try to help :)
I found a very good source of JBoss information JBoss in Action. It refers to JBoss 5 so many areas might be outdated, but other would still apply. I am using JBoss 6 and has been of great help.