activeMQ安全配置及常见问题解决

一.修改控制台密码


1.打开conf/jetty.xml，


<bean id="securityConstraint" class="org.eclipse.jetty.http.security.Constraint">
    <property name="name" value="BASIC" />
    <property name="roles" value="admin" />
    <property name="authenticate" value="false" />
</bean>
将property name为authenticate的属性value="false" 改为"true"，高版本的已经默认为true了。


2.控制台的登录用户名密码保存在conf/jetty-realm.properties文件中，内容如下:


# Defines users that can access the web (console, demo, etc.)
# username: password [,rolename ...]
admin: admin, admin
值得注意的是 用户名和密码的格式是：用户名 : 密码 ,角色名


3.修改客户端连接密码


1.修改activemq.xml配置,需要新增一个插件,在<broker>节点里面<systemUsage>节点前面添加如下


复制代码
<plugins> 
   <simpleAuthenticationPlugin> 
         <users> 
              <authenticationUser username="{activemq.username}" password="{activemq.password}" groups="users,admins"/> 
         </users> 
   </simpleAuthenticationPlugin> 
</plugins> 
复制代码
或者直接修改为（即直接将username和password赋值，所赋的值即为用户名和密码。如果使用这一种方式的话，下面的第二步则不需要了）：


复制代码
<plugins> 
   <simpleAuthenticationPlugin> 
         <users> 
              <authenticationUser username="testUserName" password="testPassword" groups="users,admins"/> 
         </users> 
   </simpleAuthenticationPlugin> 
</plugins> 
复制代码
2.用户名密码文件为:credentials.properties


复制代码
## --------------------------------------------------------------------------- 
## Licensed to the Apache Software Foundation (ASF) under one or more 
## contributor license agreements. See the NOTICE file distributed with 
## this work for additional information regarding copyright ownership. 
## The ASF licenses this file to You under the Apache License, Version 2.0 
## (the "License"); you may not use this file except in compliance with 
## the License. You may obtain a copy of the License at 
## 
## http://www.apache.org/licenses/LICENSE-2.0 
## 
## Unless required by applicable law or agreed to in writing, software 
## distributed under the License is distributed on an "AS IS" BASIS, 
## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
## See the License for the specific language governing permissions and 
## limitations under the License. 
## --------------------------------------------------------------------------- 


# Defines credentials that will be used by components (like web console) to access the broker 


activemq.username=system    # 用户名
activemq.password=manager   # 密码
guest.password=password


常见异常解决：
1.java.lang.SecurityException: User name [admin] or password is invalid


activemq.xml中  <systemUsage>节点前增加下面东西：


<plugins> 
   <simpleAuthenticationPlugin anonymousAccessAllowed="true"> 
         <users> 
              
   <authenticationUser username="admin" password="admin" groups="users,admins"/>
         </users> 
   </simpleAuthenticationPlugin> 
</plugins> 


并且credentials.properties中一定要设置：
activemq.username=admin    # 用户名
activemq.password=admin    # 密码