<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hello,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Because of new recommendation asked by our Security officer, we must add secure authentication to access rabbitmq.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>To do that, we are experiencing the usage of ldap plugin with a .Net client in front of it, but I I’m quite surprise to be forced to send the windows user password to the rabbitmq server in order for it to check the identity of the user as it seems to be a very bad security practice to ask for the already authenticated user its password and reuse it, and also my security officer will not validate that kind of solution.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Is there a way to only check that the user is already authenticated without explicit login/password using ldap authentication ?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span lang=FR>Best regards<o:p></o:p></span></p><p class=MsoNormal><span lang=FR><o:p> </o:p></span></p><p class=MsoNormal><span lang=FR>Gabriel DAUSQUE<o:p></o:p></span></p><p class=MsoNormal><span lang=FR>Expert SI Meteor FPR<o:p></o:p></span></p><p class=MsoNormal><span lang=FR>Tel : 01 56 65 66 68<o:p></o:p></span></p><p class=MsoNormal><span lang=FR>Mail : gabriel.dausque@gdfsueztrading.com<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div><p>___________________________________________________________________ </p>
<p>This message (including any attachments) and its content are confidential, meant solely for the addressees. <br>
The views expressed in this message are those of its author and do not necessarily represent the opinion of GDF SUEZ Trading. <br>
If you are not the intended recipient please notify the sender immediately and destroy this e-mail. <br>
Any unauthorised copying, use, disclosure or distribution of the content of this e-mail is strictly forbidden. <br>
GDF SUEZ Trading shall not be liable for the message if altered, changed or falsified or computer virus contained. <br>
___________________________________________________________________ </p></body></html>