<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<body link="#355491" alink="#4262a1" vlink="#355491" style="background: #e2e2e2; margin: 0; padding: 20px;">
<div>
<table cellpadding="0" bgcolor="#FFFFFF" border="0" cellspacing="0" style="border: 1px solid #dadada; margin-bottom: 30px; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td>
<table border="0" cellpadding="0" cellspacing="0" bgcolor="#FFFFFF" style="border: solid 2px #ccc; background: #dadada; width: 100%; -moz-border-radius: 6px; -webkit-border-radius: 6px;">
<tbody>
<tr>
<td bgcolor="#000000" valign="middle" height="58px" style="border-bottom: 1px solid #ccc; padding: 20px; -moz-border-radius-topleft: 3px; -moz-border-radius-topright: 3px; -webkit-border-top-right-radius: 5px; -webkit-border-top-left-radius: 5px;">
<h1 style="color: #333333; font: bold 22px Arial, Helvetica, sans-serif; margin: 0; display: block !important;">
<!-- To have a header image/logo replace the name below with your img tag -->
<!-- Email clients will render the images when the message is read so any image -->
<!-- must be made available on a public server, so that all recipients can load the image. -->
<a href="http://community.jboss.org/index.jspa" style="text-decoration: none; color: #E1E1E1">JBoss Community</a></h1>
</td>
</tr>
<tr>
<td bgcolor="#FFFFFF" style="font: normal 12px Arial, Helvetica, sans-serif; color:#333333; padding: 20px; -moz-border-radius-bottomleft: 4px; -moz-border-radius-bottomright: 4px; -webkit-border-bottom-right-radius: 5px; -webkit-border-bottom-left-radius: 5px;"><h3 style="margin: 10px 0 5px; font-size: 17px; font-weight: normal;">
Securing JBoss Messaging and EJB3
</h3>
<span style="margin-bottom: 10px;">
reply from <a href="http://community.jboss.org/people/ejb3workshop">Alexander Hartner</a> in <i>JBoss Messaging</i> - <a href="http://community.jboss.org/message/554067#554067">View the full discussion</a>
</span>
<hr style="margin: 20px 0; border: none; background-color: #dadada; height: 1px;">
<div class="jive-rendered-content"><p>I made some progress and added the mdbuser  / mdbpassword in the jboss.xml file</p><blockquote class="jive-quote"><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><div id="_mcePaste">        <message-driven></div>
<div id="_mcePaste">            <ejb-name>JobRequestListener</ejb-name></div>
<div id="_mcePaste">            <destination-jndi-name>queue/abc/JobRequests</destination-jndi-name></div>
<div id="_mcePaste">            <mdb-user>jmsuser</mdb-user></div>
<div id="_mcePaste">            <mdb-passwd>password</mdb-passwd></div><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p></blockquote><p>So now I am able to receive messages in my MDB. However any injected resources also need to be authenticated. This is not very nice as I have to include the password in the deployment descriptor as well as the application itself. I am hoping that there is an elegant way of granting the entire EAR application access to read and write to JMS destination and to be able to specify the user credentials outside the application and reference a security policy.</p><p style="min-height: 8pt; height: 8pt; padding: 0px;"> </p><p>Thanks for your help.</p><p>Alex</p></div>
<div style="background-color: #f4f4f4; padding: 10px; margin-top: 20px;">
<p style="margin: 0;">Reply to this message by <a href="http://community.jboss.org/message/554067#554067">going to Community</a></p>
<p style="margin: 0;">Start a new discussion in JBoss Messaging at <a href="http://community.jboss.org/choose-container!input.jspa?contentType=1&containerType=14&container=2042">Community</a></p>
</div></td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
</body>
</html>