Quantcast
Channel: Recent Questions - Stack Overflow
Viewing all articles
Browse latest Browse all 16330

ActiveMQ Classic 6.0 security configuration issue

$
0
0

The security of plain usernames and passwords are working fine. But in the use case where I want to introduce the encrypted passwords the clients side is working fine. But webconsole is not logging in when I am trying to open with the encrypted user creds. FYI, from ActiveMQ Classic 6 the web console and messaging clients all will use same user.properties and groups.properties. I have updated the credentials-enc.properties file too with encrypted passwords.

<plugins><!--  Configure authentication; Username, passwords and groups --><simpleAuthenticationPlugin><users><authenticationUser username="system" password="${activemq.password}"        groups="users,admins" /><authenticationUser username="admin" password="${admin.password}" groups="admins" /><authenticationUser username="user" password="${user.password}"        groups="users" /><authenticationUser username="guest" password="${guest.password}" groups="guests" /></users></simpleAuthenticationPlugin><!-- <jaasAuthenticationPlugin configuration="activemq"/>--><!--  Lets configure a destination based authorization mechanism --><authorizationPlugin><map><authorizationMap><authorizationEntries><authorizationEntry queue=">" read="admins" write="admins" admin="admins" /><authorizationEntry queue="USERS.>" read="users" write="users" admin="users" /><authorizationEntry queue="GUEST.>" read="guests" write="guests,users"            admin="guests,users" /><authorizationEntry queue="TEST.Q" read="guests" write="guests" /><authorizationEntry topic=">" read="admins" write="admins" admin="admins" /><authorizationEntry topic="USERS.>" read="users" write="users" admin="users" /><authorizationEntry topic="GUEST.>" read="guests" write="guests,users"            admin="guests,users" /><authorizationEntry topic="ActiveMQ.Advisory.>" read="guests,users" write="guests,users"            admin="guests,users" /></authorizationEntries></authorizationMap></map></authorizationPlugin></plugins>

user.properties:

admin=admin

groups.properties:

admins=admin,systemusers=userguests=guest    

credential-enc.properties:

activemq.username=systemactivemq.password=ENC(OwqXbnUGdm7zpcpvE69BHg==)guest.password=ENC(+wtxi4bniLdI3XZ4ZpkjZw==)user.password=ENC(Ta7++Hsuwp7x3UXbJZ8Png==)admin.password=ENC(C1HgmCT06/NSosieXcpA+w==)

The security of the messaging clients is working absolutely fine, but the web console is opening with the users I have given in user.properties.

My question is as this version of ActiveMQ Classic uses the same users.properties and groups.properties but why the web console is not opening with the other encrypted users where I didn't mentioned them in the user.properties file.


Viewing all articles
Browse latest Browse all 16330

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>