Ted,
I know we've had this discussion before, but wanted to triple check on
this because a lot of the Matahari model depends on it.
My understand is that it is possible to restrict what role a connection to
a broker is able to take via auth credentials. For example:
* broker1 has two auth credentials defined:
- user foo: allows connections from both QMF Consoles and QMF Agents
- user bar: allows connections only from QMF Agents
With this functionality, we could provide a single broker and only give
out user foo credentials to Consoles running in protected areas (mgmt DMZ
for example). And then only provide user bar credentials to the guests
running in the Cloud so they could only ever connect to the external
broker as an Agent.
Can you please confirm this?
Thanks!
Perry