Securing JMS Destinations

[M.Junaid]

I have a problem in configuring the security for the destination queue which is the permanent queue. I have DBServerLogin configured for "jbossmq" in login-config.xml where unauthenticated identity is "guest"
I dont want to add this principal to my SecurityConfig for the queue. If I dont add the principal I get
javax.jms.JMSSecurityException: Connection not authorized to add messages to destination: FirstQueue while trying to send messages to this queue from jms client.

[M.Junaid]

Suppose somebody is using jms app. client for adding messages to queue while MDB is the consumer.
a)app client should supply username,password while getting queueConnection using myConnectionFactory.createQueueConnection("username","passwd")
b)MDB deployment on the otherhand should be mentioning these in jboss-jar.xml.

<jboss>
<enterprise-beans>
<message-driven>
<ejb-name>MessageBean</ejb-name>
<destination-jndi-name>queue/FirstQueue</destination-jndi-name>
<mdb-user>dynsub</mdb-user>
<mdb-passwd >dynsub</mdb-passwd>
</message-driven>
</enterprise-beans>
</jboss>

[ February 01, 2005: Message edited by: M.Junaid ]