[
https://issues.apache.org/jira/browse/ARTEMIS-1116?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15971450#comment-15971450
]
ASF GitHub Bot commented on ARTEMIS-1116:
-----------------------------------------
Github user jbertram commented on the issue:
https://github.com/apache/activemq-artemis/pull/1206
Thanks for fixing the commit message and checkstyle issues.
The more I think about this the more I think this should be a general
feature which all login modules can use rather than just the LDAP login module.
In general, this functionality would only be useful for login modules pulling
data from an external system like LDAP which makes it a natural fit for the
LDAP login module, but other users might implement their own login module where
this functionality would be useful (e.g. integrating with a legacy auth system)
and I wouldn't want to require a re-implementation. Also, I think moving the
configuration into broker.xml from login.config will be provide a better user
experience.
From a configuration perspective this would be a good fit in
<security-settings> next to <security-setting> and <security-setting-plugin>.
The name <role-mapping> seems appropriate. It could have a "from" and "to"
attribute where "from" is delimited with e.g. a comma.
> map ldap roles to local artemis roles
> -------------------------------------
>
> Key: ARTEMIS-1116
> URL: https://issues.apache.org/jira/browse/ARTEMIS-1116
> Project: ActiveMQ Artemis
> Issue Type: Improvement
> Components: Broker
> Affects Versions: 2.0.0
> Reporter: Stephen Higgs
>
> Allow users to map LDAP roles to local ActiveMQ roles in the LDAP realm
> configuration, similar to what is provided in A-MQ6.
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
