You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@activemq.apache.org by "Claus Ibsen (JIRA)" <ji...@apache.org> on 2016/11/22 11:13:58 UTC

[jira] [Resolved] (AMQ-5247) Implementation forces to set plaintext user and password for activemq.jmx.

     [ https://issues.apache.org/jira/browse/AMQ-5247?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Claus Ibsen resolved AMQ-5247.
------------------------------
       Resolution: Fixed
         Assignee:     (was: Jean-Baptiste Onofré)
    Fix Version/s: 5.15.0

Thanks for the PR

> Implementation forces to set plaintext user and password for activemq.jmx.<user/password>
> -----------------------------------------------------------------------------------------
>
>                 Key: AMQ-5247
>                 URL: https://issues.apache.org/jira/browse/AMQ-5247
>             Project: ActiveMQ
>          Issue Type: Improvement
>          Components: OSGi/Karaf
>    Affects Versions: 5.10.0
>            Reporter: Benjamin Graf
>              Labels: security
>             Fix For: 5.15.0
>
>
> Actually karaf based distributions like ServiceMix have user/password for activemq commands in plaintext files. It is recommended to crypt credential information in karaf but there is no possibility to do for activemq.jmx.*. One solution for this problem might be to let jmxUseLocal settable default to true. This way there is no need to set user/password in plaintext files. Karaf or better ServiceMix might provide encryption wrapper for the system properties via jasypt if needed.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)