[rabbitmq-discuss] Multi tenancy

[Simon MacMullen]

On 14/12/10 16:39, Matt Miller wrote:
> I had a similar issue; there exists an experimental ldap
> authentication/authorization plugin. It sounds promising but I have
> not got it to run on my system.

I'd describe it as more than experimental :) It's there as much as 
anything to test a plugin mechanism for authentication / authorisation - 
and that mechanism is itself experimental at the moment :)

Hopefully at some point in the future this will all get merged and then 
the LDAP plugin will be a binary download like the others.

> LDAP also turned out to be a real
> pain.. slapd works great but the documentation is very confusing and
> convoluted as the distro specifics and implementation have been
> volatile.

That's quite true, slapd is pretty horrible to get started with.

> If interested you might want to try compiling the auth-ldap plugin
> and use Apache DS.

I think we talked about this before. I'm interested to note that it 
sounds like you're not so concerned about LDAP itself, as in having a 
way to manage large numbers of users / vhosts. Is that fair?

At the moment our plans for authentication / authorisation plugins 
involve virtual hosts still residing inside RabbitMQ - only users and 
permissions would be external. Would that work for your use case?

Cheers, Simon

-- 
Simon MacMullen
Staff Engineer, RabbitMQ
SpringSource, a division of VMware