You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@activemq.apache.org by vbose <vi...@yahoo.com> on 2010/06/15 17:39:34 UTC

Securing ActiveMQ 5.3.2 Web console

I tried to follow the steps mentioned at the URL 
http://www.nighttale.net/activemq/securing-activemq-531-console.html
securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console. But it
did not work for me.

I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers. Then
I configured the embedded jetty.xml as per your recommendation. The file is
located in /opt/apache-activemq-5.3.2/conf. Then I restarted activeMQ
broker. But the activeMQ browser app running on port 8161 did not ask for
login.  I have a property file called amqrealm.properties located in
/opt/apache-activemq-5.3.2/conf. The jetty.xml configuration is uploaded for
reference.

I am using activemq script from the folder
/opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I miss
anything?


http://old.nabble.com/file/p28892934/activeMQ-jetty.txt activeMQ-jetty.txt 


-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28892934.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.

Re: Securing ActiveMQ 5.3.2 Web console

Posted by cobrien <cl...@yahoo.com>.
If I leave all files in the default location- apache-activemq-5.3.2/conf- I
still get an authentication challenge.  

Clark 


www.ttmsolutions.com
ActiveMQ reference guide at
http://bit.ly/AMQRefGuide





vbose wrote:
> 
> Clark,
> 
> If I moved jetty.xml to the activemq home directory, then the start-up
> script choked and it exited with File not found exception. Again, I do not
> want to do this, I wanted to keep jetty.xml as it is as per the activeMq
> 5.3.2 tar distribution which is in conf folder. I am using Java Service
> Wrapper provided with the binary to start and stop active mq broker
> service.
> 
> Vigil
> 
> 
> 
> cobrien wrote:
>> 
>> The attached files cause a  browser authentication challenge on my
>> machine.
>> The  jetty.xml is in  apache-activemq-5.3.2 - NOT under conf
>> and  jetty-realm.properties  is in apache-activemq-5.3.2/conf 
>> 
>> 
>> 
>>  
>> Clark 
>> 
>> 
>> www.ttmsolutions.com
>> ActiveMQ reference guide at
>> http://bit.ly/AMQRefGuide
>> 
>> PS
>> 
>> I start the activeMQ instance from the home directory of ActiveMQ thus:
>> 
>> ./bin/activemq
>> 
>> 
>>  
>> 
>>  http://old.nabble.com/file/p28894803/jetty.xml jetty.xml 
>> http://old.nabble.com/file/p28894803/jetty-realm.properties
>> jetty-realm.properties 
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> 
>> cobrien wrote:
>>> 
>>> I think you are missing a reference to the security handling in your
>>> list of handlers. 
>>> 
>>> 
>>> Should be something like:
>>> 
>>>  <property name="handlers">
>>>           <list>
>>>              <ref bean="securityHandler" />
>>>              <bean....
>>> 
>>> 
>>> 
>>> 
>>> Clark 
>>> 
>>> 
>>> www.ttmsolutions.com
>>> ActiveMQ reference guide at
>>> http://bit.ly/AMQRefGuide
>>> 
>>> 
>>> 
>>> 
>>> 
>>> vbose wrote:
>>>> 
>>>> I tried to follow the steps mentioned at the URL 
>>>> http://www.nighttale.net/activemq/securing-activemq-531-console.html
>>>> securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console.
>>>> But it did not work for me.
>>>> 
>>>> I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers.
>>>> Then I configured the embedded jetty.xml as per your recommendation.
>>>> The file is located in /opt/apache-activemq-5.3.2/conf. Then I
>>>> restarted activeMQ broker. But the activeMQ browser app running on port
>>>> 8161 did not ask for login.  I have a property file called
>>>> amqrealm.properties located in /opt/apache-activemq-5.3.2/conf. The
>>>> jetty.xml configuration is uploaded for reference.
>>>> 
>>>> I am using activemq script from the folder
>>>> /opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I
>>>> miss anything?
>>>> 
>>>> 
>>>>  http://old.nabble.com/file/p28892934/activeMQ-jetty.txt
>>>> activeMQ-jetty.txt 
>>>> 
>>>> 
>>>> 
>>> 
>>> 
>> 
>> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28896745.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.


Re: Securing ActiveMQ 5.3.2 Web console

Posted by vbose <vi...@yahoo.com>.
Clark,

If I moved jetty.xml to the activemq home directory, then the start-up
script choked and it exited with File not found exception. Again, I do not
want to do this, I wanted to keep jetty.xml as it is as per the activeMq
5.3.2 tar distribution which is in conf folder. I am using Java Service
Wrapper provided with the binary to start and stop active mq broker service.

Vigil



cobrien wrote:
> 
> The attached files cause a  browser authentication challenge on my
> machine.
> The  jetty.xml is in  apache-activemq-5.3.2 - NOT under conf
> and  jetty-realm.properties  is in apache-activemq-5.3.2/conf 
> 
> 
> 
>  
> Clark 
> 
> 
> www.ttmsolutions.com
> ActiveMQ reference guide at
> http://bit.ly/AMQRefGuide
> 
> PS
> 
> I start the activeMQ instance from the home directory of ActiveMQ thus:
> 
> ./bin/activemq
> 
> 
>  
> 
>  http://old.nabble.com/file/p28894803/jetty.xml jetty.xml 
> http://old.nabble.com/file/p28894803/jetty-realm.properties
> jetty-realm.properties 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> cobrien wrote:
>> 
>> I think you are missing a reference to the security handling in your list
>> of handlers. 
>> 
>> 
>> Should be something like:
>> 
>>  <property name="handlers">
>>           <list>
>>              <ref bean="securityHandler" />
>>              <bean....
>> 
>> 
>> 
>> 
>> Clark 
>> 
>> 
>> www.ttmsolutions.com
>> ActiveMQ reference guide at
>> http://bit.ly/AMQRefGuide
>> 
>> 
>> 
>> 
>> 
>> vbose wrote:
>>> 
>>> I tried to follow the steps mentioned at the URL 
>>> http://www.nighttale.net/activemq/securing-activemq-531-console.html
>>> securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console. But
>>> it did not work for me.
>>> 
>>> I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers.
>>> Then I configured the embedded jetty.xml as per your recommendation. The
>>> file is located in /opt/apache-activemq-5.3.2/conf. Then I restarted
>>> activeMQ broker. But the activeMQ browser app running on port 8161 did
>>> not ask for login.  I have a property file called amqrealm.properties
>>> located in /opt/apache-activemq-5.3.2/conf. The jetty.xml configuration
>>> is uploaded for reference.
>>> 
>>> I am using activemq script from the folder
>>> /opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I
>>> miss anything?
>>> 
>>> 
>>>  http://old.nabble.com/file/p28892934/activeMQ-jetty.txt
>>> activeMQ-jetty.txt 
>>> 
>>> 
>>> 
>> 
>> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28896105.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.


Re: Securing ActiveMQ 5.3.2 Web console

Posted by cobrien <cl...@yahoo.com>.
The attached files cause a  browser authentication challenge on my machine.
The  jetty.xml is in  apache-activemq-5.3.2 - NOT under conf
and  jetty-realm.properties  is in apache-activemq-5.3.2/conf 
 
Clark 


www.ttmsolutions.com
ActiveMQ reference guide at
http://bit.ly/AMQRefGuide



http://old.nabble.com/file/p28894803/jetty.xml jetty.xml 
http://old.nabble.com/file/p28894803/jetty-realm.properties
jetty-realm.properties 










cobrien wrote:
> 
> I think you are missing a reference to the security handling in your list
> of handlers. 
> 
> 
> Should be something like:
> 
>  <property name="handlers">
>           <list>
>              <ref bean="securityHandler" />
>              <bean....
> 
> 
> 
> 
> Clark 
> 
> 
> www.ttmsolutions.com
> ActiveMQ reference guide at
> http://bit.ly/AMQRefGuide
> 
> 
> 
> 
> 
> vbose wrote:
>> 
>> I tried to follow the steps mentioned at the URL 
>> http://www.nighttale.net/activemq/securing-activemq-531-console.html
>> securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console. But
>> it did not work for me.
>> 
>> I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers.
>> Then I configured the embedded jetty.xml as per your recommendation. The
>> file is located in /opt/apache-activemq-5.3.2/conf. Then I restarted
>> activeMQ broker. But the activeMQ browser app running on port 8161 did
>> not ask for login.  I have a property file called amqrealm.properties
>> located in /opt/apache-activemq-5.3.2/conf. The jetty.xml configuration
>> is uploaded for reference.
>> 
>> I am using activemq script from the folder
>> /opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I
>> miss anything?
>> 
>> 
>>  http://old.nabble.com/file/p28892934/activeMQ-jetty.txt
>> activeMQ-jetty.txt 
>> 
>> 
>> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28894803.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.


Re: Securing ActiveMQ 5.3.2 Web console

Posted by vbose <vi...@yahoo.com>.
I added a reference to securityHandler as you mentioned but again the result
is same as it did not ask for login after restarting the broker.


cobrien wrote:
> 
> I think you are missing a reference to the security handling in your list
> of handlers. 
> 
> 
> Should be something like:
> 
>  <property name="handlers">
>           <list>
>              <ref bean="securityHandler" />
>              <bean....
> 
> 
> 
> 
> Clark 
> 
> 
> www.ttmsolutions.com
> ActiveMQ reference guide at
> http://bit.ly/AMQRefGuide
> 
> 
> 
> 
> 
> vbose wrote:
>> 
>> I tried to follow the steps mentioned at the URL 
>> http://www.nighttale.net/activemq/securing-activemq-531-console.html
>> securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console. But
>> it did not work for me.
>> 
>> I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers.
>> Then I configured the embedded jetty.xml as per your recommendation. The
>> file is located in /opt/apache-activemq-5.3.2/conf. Then I restarted
>> activeMQ broker. But the activeMQ browser app running on port 8161 did
>> not ask for login.  I have a property file called amqrealm.properties
>> located in /opt/apache-activemq-5.3.2/conf. The jetty.xml configuration
>> is uploaded for reference.
>> 
>> I am using activemq script from the folder
>> /opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I
>> miss anything?
>> 
>> 
>>  http://old.nabble.com/file/p28892934/activeMQ-jetty.txt
>> activeMQ-jetty.txt 
>> 
>> 
>> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28894164.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.


Re: Securing ActiveMQ 5.3.2 Web console

Posted by cobrien <cl...@yahoo.com>.
I think you are missing a reference to the security handling in your list of
handlers. 


Should be something like:

 <property name="handlers">
          <list>
             <ref bean="securityHandler" />
             <bean....




Clark 


www.ttmsolutions.com
ActiveMQ reference guide at
http://bit.ly/AMQRefGuide





vbose wrote:
> 
> I tried to follow the steps mentioned at the URL 
> http://www.nighttale.net/activemq/securing-activemq-531-console.html
> securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console. But
> it did not work for me.
> 
> I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers.
> Then I configured the embedded jetty.xml as per your recommendation. The
> file is located in /opt/apache-activemq-5.3.2/conf. Then I restarted
> activeMQ broker. But the activeMQ browser app running on port 8161 did not
> ask for login.  I have a property file called amqrealm.properties located
> in /opt/apache-activemq-5.3.2/conf. The jetty.xml configuration is
> uploaded for reference.
> 
> I am using activemq script from the folder
> /opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I
> miss anything?
> 
> 
>  http://old.nabble.com/file/p28892934/activeMQ-jetty.txt
> activeMQ-jetty.txt 
> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28893664.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.


Re: Securing ActiveMQ 5.3.2 Web console

Posted by titexe <ti...@yahoo.Fr>.
this article explain, how can you secure web console :

http://www.nighttale.net/activemq/securing-activemq-531-console.html

i have tried, and it work fine.

titexe



magellings wrote:
> 
> http://old.nabble.com/Securing-the-web-console-impossible--tt16765525.html#a16784476
> 
> 
> vbose wrote:
>> 
>> I tried to follow the steps mentioned at the URL 
>> http://www.nighttale.net/activemq/securing-activemq-531-console.html
>> securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console. But
>> it did not work for me.
>> 
>> I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers.
>> Then I configured the embedded jetty.xml as per your recommendation. The
>> file is located in /opt/apache-activemq-5.3.2/conf. Then I restarted
>> activeMQ broker. But the activeMQ browser app running on port 8161 did
>> not ask for login.  I have a property file called amqrealm.properties
>> located in /opt/apache-activemq-5.3.2/conf. The jetty.xml configuration
>> is uploaded for reference.
>> 
>> I am using activemq script from the folder
>> /opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I
>> miss anything?
>> 
>> 
>>  http://old.nabble.com/file/p28892934/activeMQ-jetty.txt
>> activeMQ-jetty.txt 
>> 
>> 
>> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28922582.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.


Re: Securing ActiveMQ 5.3.2 Web console

Posted by magellings <ma...@qg.com>.
http://old.nabble.com/Securing-the-web-console-impossible--tt16765525.html#a16784476


vbose wrote:
> 
> I tried to follow the steps mentioned at the URL 
> http://www.nighttale.net/activemq/securing-activemq-531-console.html
> securing-activemq-531-console  to secure ActiveMQ 5.3.2 web console. But
> it did not work for me.
> 
> I have installed activeMQ 5.3.2 under /opt/ in our Test Linux servers.
> Then I configured the embedded jetty.xml as per your recommendation. The
> file is located in /opt/apache-activemq-5.3.2/conf. Then I restarted
> activeMQ broker. But the activeMQ browser app running on port 8161 did not
> ask for login.  I have a property file called amqrealm.properties located
> in /opt/apache-activemq-5.3.2/conf. The jetty.xml configuration is
> uploaded for reference.
> 
> I am using activemq script from the folder
> /opt/apache-activemq-5.3.2/bin/linux-x86-32 to start the broker. Did I
> miss anything?
> 
> 
>  http://old.nabble.com/file/p28892934/activeMQ-jetty.txt
> activeMQ-jetty.txt 
> 
> 
> 

-- 
View this message in context: http://old.nabble.com/Securing-ActiveMQ-5.3.2-Web-console-tp28892934p28903046.html
Sent from the ActiveMQ - User mailing list archive at Nabble.com.