29.6. HornetQ Security Manager

JBoss Enterprise Application Platform can be configured to allow client login. This is when a Java EE component such as a Servlet or EJB sets security credentials on the current security context, and these are used throughout the call.

HornetQ can use these settings when sending or consuming messages by changing the allowClientLogin property to true (default is false) in <JBOSS_HOME>/jboss-as/server/<PROFILE>/deploy/hornetq/hornetq-jboss-beans.xml file. This bypasses HornetQ authentication, and propagates the provided Security Context.

If HornetQ should authenticate using the propagated security, set the authoriseOnClientLogin to true in addition to allowClientLogin.