The security of plain usernames and passwords are working fine. But in the use case where I want to introduce the encrypted passwords the clients side is working fine. But webconsole is not logging in when I am trying to open with the encrypted user creds. FYI, from ActiveMQ Classic 6 the web console and messaging clients all will use same user.properties
and groups.properties
. I have updated the credentials-enc.properties
file too with encrypted passwords.
<plugins><!-- Configure authentication; Username, passwords and groups --><simpleAuthenticationPlugin><users><authenticationUser username="system" password="${activemq.password}" groups="users,admins" /><authenticationUser username="admin" password="${admin.password}" groups="admins" /><authenticationUser username="user" password="${user.password}" groups="users" /><authenticationUser username="guest" password="${guest.password}" groups="guests" /></users></simpleAuthenticationPlugin><!-- <jaasAuthenticationPlugin configuration="activemq"/>--><!-- Lets configure a destination based authorization mechanism --><authorizationPlugin><map><authorizationMap><authorizationEntries><authorizationEntry queue=">" read="admins" write="admins" admin="admins" /><authorizationEntry queue="USERS.>" read="users" write="users" admin="users" /><authorizationEntry queue="GUEST.>" read="guests" write="guests,users" admin="guests,users" /><authorizationEntry queue="TEST.Q" read="guests" write="guests" /><authorizationEntry topic=">" read="admins" write="admins" admin="admins" /><authorizationEntry topic="USERS.>" read="users" write="users" admin="users" /><authorizationEntry topic="GUEST.>" read="guests" write="guests,users" admin="guests,users" /><authorizationEntry topic="ActiveMQ.Advisory.>" read="guests,users" write="guests,users" admin="guests,users" /></authorizationEntries></authorizationMap></map></authorizationPlugin></plugins>
user.properties
:
admin=admin
groups.properties
:
admins=admin,systemusers=userguests=guest
credential-enc.properties
:
activemq.username=systemactivemq.password=ENC(OwqXbnUGdm7zpcpvE69BHg==)guest.password=ENC(+wtxi4bniLdI3XZ4ZpkjZw==)user.password=ENC(Ta7++Hsuwp7x3UXbJZ8Png==)admin.password=ENC(C1HgmCT06/NSosieXcpA+w==)
The security of the messaging clients is working absolutely fine, but the web console is opening with the users I have given in user.properties
.
My question is as this version of ActiveMQ Classic uses the same users.properties
and groups.properties
but why the web console is not opening with the other encrypted users where I didn't mentioned them in the user.properties
file.