activeMQ5.14权限配置

activeMQ默认的消息队列没有用户名和密码，可以直接通过TCP连接

tcp://192.168.1.1:61616

管理控制台的默认用户名密码admin/admin
http://192.168.1.1:8161/admin/

一般情况下，都需要修改用户名和密码，控制台的要修改，消息队列也要有自己的用户名和密码。

修改控制台的密码

#jetty-realm.properties
# Defines users that can access the web (console, demo, etc.)
# username: password [,rolename ...]
admin: adminxxxxx, admin
user: user, user
jetty-realm.properties (END) 

修改消息队列的密码

#activemq.xml 使用JAAS认证和授权
<broker>
...
 <plugins>
    <jaasAuthenticationPlugin configuration="activemq-domain" /> 
<authorizationPlugin>
       <map>
         <authorizationMap>
           <authorizationEntries>
             <authorizationEntry queue="queue0" read="users" write="users" admin="users" />
             <authorizationEntry queue="queue1" read="users" write="users" admin="users" />
             <authorizationEntry topic="ActiveMQ.Advisory.>" read="guests,users" write="guests,users" admin="guests,users"/>           
</authorizationEntries>
           <tempDestinationAuthorizationEntry>
             <tempDestinationAuthorizationEntry read="admin" write="admin" admin="admin"/>
           </tempDestinationAuthorizationEntry>
        </authorizationMap>
      </map>
   </authorizationPlugin>
  </plugins>
...
</broker>

修改jaas的配置文件

#groups.properties
#此处分为admins和users组，tom1和tom2属于users组
admins=admin
users=tom1,tom2

#users.properties
admin=admin
tom1=tom1passwd
tom2=tom2passwd

#login.config
activemq {
    org.apache.activemq.jaas.PropertiesLoginModule required
        org.apache.activemq.jaas.properties.user="users.properties"
        org.apache.activemq.jaas.properties.group="groups.properties";
};
activemq-domain {
    org.apache.activemq.jaas.PropertiesLoginModule required
        org.apache.activemq.jaas.properties.user="users.properties"
        org.apache.activemq.jaas.properties.group="groups.properties";
};

若通过rest方式调用了mq，则jetty-realm.properties文件中也需要添加

#jetty-realm.properties
# Defines users that can access the web (console, demo, etc.)
# username: password [,rolename ...]
admin: adminxxxxx, admin
tom1: tom1passwd, user
tom2: tom2passwd, user