ActiveMQ Web Console (Jetty) Authentication using LDAP - authentication

I was wondering if anyone knows how to setup authentication using LDAP for ActiveMQ 5.4.2 Web Console?
It's really simple just to enable basic authentication from jetty.xml and set a new user/pass in clear text in jetty-realm.properties file, but I have many users in LDAP that need to access the web console.
Thank you in advance for any help!
Nerses

You could use JAAS and the LdapLoginModule.
http://wiki.eclipse.org/Jetty/Tutorial/JAAS
and LdapLoginModule
-jim

Related

Securing ActiveMQ REST API

Has anyone configured ActiveMQ REST API access in such a way that the username created in jetty-realm.properties does not have any access to the Admin Console?
If so, does anyone have any sample jetty.xml and jetty-realm.propeteis examples that they are willing to share?
Thanks in advance!

Okta Integration WebSphere

I have to integrate Websphere Application Server with OKTA. After googling I have configured snoop application as now I access OKTA(https://myorg.okta.com) and see the application there click there and I am logged in to the application successfully.
But my question is this at most of the tutorial after OKTA integration the url(https://washost/snoop) is mentioned for testing.
Can you please guide me which approach is right and why?
Many Thanks
Rama Sohaib and Xsurgent,
I have googled it more and understood my issue.Actually there are two types of Web SSO.
IDP(OKTA) Initiated where the URL becomes like this https://okta.com and SP(Websphere) Initiated where URL is like this https://washost/snoop. Websphere do not support SP Initiated SSO. It only supports IDP initiated SSO.
Thanks alot guys for helping me.Since I have successfully verified OKTA Integration with snoop I can easily integrate with any custom application.
Many Thanks,
Umar

Using weblogic Authorization without authentication

I have implemented OAM SSO Authentication for my web application deployed on weblogic. Now i want use weblogic embedded LDAP to provide app level authorization. I dont want to use the weblogic authentication, just the authorization since i already have authentication handled by OAM. Is that possible? Can someone please point me to any examples, tutorials, or ideas to achieve this?
Depending on your OAM version, you need to add a OAMIdentityAsserter Provider in your WLS domain. I say depending on your OAM verison, because you need to tell it which type of cookies to use.
OAM Admin guide will tell you how to do this.

How to do servlet authentication against Liferay portal DB?

Currently we are having a servlet application which is getting authenticated against the Jboss portal.But now we are forced to move to Liferay portal from Jboss portal, we need to find the way to authenticate against Liferay portal Database from my servlet application.Currently in my servlet application , I am using webauthentication class to authenticate against Jboss portal.But in liferay I am not finding any custom class which is responsible for doing the servlet authentication. So do I need to write my custom login module ? Anybody please share me if u have any idea/reference on servlet Liferay authentication
Any help is appreciated..
Regards,
Suresh
Take a look at com.liferay.portal.servlet.filters.autologin.AutoLoginFilter specifically at getLoginRemoteUser method.
Also take a look at classes in com.liferay.portal.security.auth package.
There's a virtual LDAP plugin for Liferay, offering the Liferay user database through the LDAP protocol. Caveat: It seems to be "enterprise edition" only.

Glassfish Custom Authentication Module?

I know glassfish can authenticate against an LDAP server, I also know it can authenticate against my own database. What I would like to do is authenticate users against LDAP, but get their roles from my own database.
Where would I start learning how to create my own custom authentication module?
HERE is the step-by-step instructions of how to do this.
See the Glassfish security FAQ, specifically "How do I write/configure my own login module and plug it into GlassFish?"
and this sun document