Activemq配置——Jaas方式配置用户登录验证

配置方式：

一、要配置系统环境变量：配置Jaas加载的配置文件路径。

linux下使用

export ACTIVEMQ_OPTS=-Djava.security.auth.login.config= 

或是在profile文件末尾添加上这样一个导出

windows下

SET ACTIVEMQ_OPTS=%ACTIVEMQ_OPTS% -Djava.security.auth.login.config=

二、配置配置文件

在配置文件broker之间添加下面的配置

1.   
2.           
4.         
5.   
6.   
7.         
8.         
9.           
10.             
11.               
12.                queue=">" read="admins" write="admins" admin="admins" />  
13.                queue="USERS.>" read="users" write="users" admin="users" />  
14.                queue="GUEST.>" read="guests" write="guests,users" admin="guests,users" />  
15.                 
16.                queue="TEST.Q" read="guests" write="guests" />  
17.                 
18.                topic=">" read="admins" write="admins" admin="admins" />  
19.                topic="USERS.>" read="users" write="users" admin="users" />  
20.                topic="GUEST.>" read="guests" write="guests,users" admin="guests,users" />  
21.                 
22.                topic="ActiveMQ.Advisory.>" read="guests,users" write="guests,users" admin="guests,users"/>  
23.               
24.             
25.           
26.         
27.       

login.config：Jaas插件验证入口

1. activemq-domain //与配置文件中jaas plugin配置中的configuration相一致
2. {
       org.apache.activemq.jaas.PropertiesLoginModule required//加载模块
           debug=true //设置调试模式
           org.apache.activemq.jaas.properties.user="users.properties"//配置users.properties的相应文件路径
           org.apache.activemq.jaas.properties.group="groups.properties";//配置groups.properties的相应文件路径
   };
   

下载连接：login.config

users.properties：配置用户名和密码

1. ## ---------------------------------------------------------------------------
   ## Licensed to the Apache Software Foundation (ASF) under one or more
   ## contributor license agreements.  See the NOTICE file distributed with
   ## this work for additional information regarding copyright ownership.
   ## The ASF licenses this file to You under the Apache License, Version 2.0
   ## (the "License"); you may not use this file except in compliance with
   ## the License.  You may obtain a copy of the License at
   ## 
   ## http://www.apache.org/licenses/LICENSE-2.0
   ## 
   ## Unless required by applicable law or agreed to in writing, software
   ## distributed under the License is distributed on an "AS IS" BASIS,
   ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   ## See the License for the specific language governing permissions and
   ## limitations under the License.
   ## ---------------------------------------------------------------------------
   
   #格式user=password
2. 
   system=manager
   user=password
   guest=password
   sslclient=CN=localhost, OU=activemq.org, O=activemq.org, L=LA, ST=CA, C=US
   

下载连接：users.properties

group.properties：配置用户对应的用户组

1. ## ---------------------------------------------------------------------------
   ## Licensed to the Apache Software Foundation (ASF) under one or more
   ## contributor license agreements.  See the NOTICE file distributed with
   ## this work for additional information regarding copyright ownership.
   ## The ASF licenses this file to You under the Apache License, Version 2.0
   ## (the "License"); you may not use this file except in compliance with
   ## the License.  You may obtain a copy of the License at
   ## 
   ## http://www.apache.org/licenses/LICENSE-2.0
   ## 
   ## Unless required by applicable law or agreed to in writing, software
   ## distributed under the License is distributed on an "AS IS" BASIS,
   ## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   ## See the License for the specific language governing permissions and
   ## limitations under the License.
   ## ---------------------------------------------------------------------------
   
   #格式：用户组=用户1,用户2,...
   admins=system,sslclient,client,broker1,broker2
   tempDestinationAdmins=system,user,sslclient,client,broker1,broker2
   users=system,user,sslclient,client,broker1,broker2
   guests=guest

下载连接：group.properties