active5.5 安全配置

1 访问http://localhost:8161 需要密码

 1.1需要密码验证：打开conf/jetty.xml文件，找到 
 <bean id="securityConstraint" class="org.eclipse.jetty.http.security.Constraint">
  <property name="name" value="BASIC" />
  <property name="roles" value="admin" />
  <property name="authenticate" value="false" />  #将“false”改为“true”即可
 </bean>

 1.2 设定密码： 打开conf/jetty-realm.properties文件，找到
 admin: admin,admin    
 用户名：密码，权限

 

2、生产者和消费者连接MQ需要密码

从conf/activemq-security.xml中的 <broker> 标签中的<plugins>标签 开始往下全部替换掉
  conf/activemq.xml中的 <broker> 标签中的<plugins>标签 往下的部分。

 
3 注意修改相应的密码哦~

4 欢迎拍砖~

评论

2 楼 seffxu 2011-10-11  

问题解决，是plugins标签的位置不对，
放在transportConnectors标签之前就可以了,如下：

<plugins>
<!-- Configure authentication; Username, passwords and groups -->
<simpleAuthenticationPlugin>
<users>
<authenticationUser username="system" password="${activemq.password}"
groups="users,admins"/>
<authenticationUser username="user" password="${guest.password}"
groups="users"/>
<authenticationUser username="guest" password="${guest.password}" groups="guests"/>
</users>
</simpleAuthenticationPlugin>

        <!--  Lets configure a destination based authorization mechanism -->
<authorizationPlugin>
<map>
<authorizationMap>
<authorizationEntries>
  <authorizationEntry queue=">" read="admins" write="admins" admin="admins" />
  <authorizationEntry queue="USERS.>" read="users" write="users" admin="users" />
  <authorizationEntry queue="GUEST.>" read="guests" write="guests,users" admin="guests,users" />
 
  <authorizationEntry queue="TEST.Q" read="guests" write="guests" />
 
  <authorizationEntry topic=">" read="admins" write="admins" admin="admins" />
  <authorizationEntry topic="USERS.>" read="users" write="users" admin="users" />
  <authorizationEntry topic="GUEST.>" read="guests" write="guests,users" admin="guests,users" />
 
  <authorizationEntry topic="ActiveMQ.Advisory.>" read="guests,users" write="guests,users" admin="guests,users"/>
  </authorizationEntries>
</authorizationMap>
</map>
</authorizationPlugin>
</plugins>

<transportConnectors>
        <transportConnector name="openwire" uri="tcp://0.0.0.0:61616"/>
</transportConnectors>

1 楼 seffxu 2011-10-11  

引用

2、生产者和消费者连接MQ需要密码
从conf/activemq-security.xml中的 <broker> 标签中的<plugins>标签 开始往下全部替换掉
  conf/activemq.xml中的 <broker> 标签中的<plugins>标签 往下的部分。

在activemq.xml中加入<plugins>标签后，activemq启动就出错：
java.lang.RuntimeException: Failed to execute start task. Reason: org.springfram
ework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 126 in XML documen
t from class path resource [activemq.xml] is invalid; nested exception is org.xm
l.sax.SAXParseException: cvc-complex-type.2.4.a: Invalid content was found start
ing with element 'plugins'. One of '{WC[##other:"http://activemq.apache.org/sche
ma/core"]}' is expected.
        at org.apache.activemq.console.command.StartCommand.runTask(StartCommand
.java:98)
        at org.apache.activemq.console.command.AbstractCommand.execute(AbstractC
ommand.java:57)
        at org.apache.activemq.console.command.ShellCommand.runTask(ShellCommand
.java:143)
        at org.apache.activemq.console.command.AbstractCommand.execute(AbstractC
ommand.java:57)
        at org.apache.activemq.console.command.ShellCommand.main(ShellCommand.ja
va:85)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
        at java.lang.reflect.Method.invoke(Unknown Source)
        at org.apache.activemq.console.Main.runTaskClass(Main.java:251)
        at org.apache.activemq.console.Main.main(Main.java:107)
Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException
: Line 126 in XML document from class path resource [activemq.xml] is invalid; n
ested exception is org.xml.sax.SAXParseException: cvc-complex-type.2.4.a: Invali
d content was found starting with element 'plugins'. One of '{WC[##other:"http:/
/activemq.apache.org/schema/core"]}' is expected.
        at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadB
eanDefinitions(XmlBeanDefinitionReader.java:396)