diff --git a/artemis-server/src/main/java/org/apache/activemq/artemis/spi/core/security/jaas/TextFileCertificateLoginModule.java b/artemis-server/src/main/java/org/apache/activemq/artemis/spi/core/security/jaas/TextFileCertificateLoginModule.java index dda073ae3b..45a121174b 100644 --- a/artemis-server/src/main/java/org/apache/activemq/artemis/spi/core/security/jaas/TextFileCertificateLoginModule.java +++ b/artemis-server/src/main/java/org/apache/activemq/artemis/spi/core/security/jaas/TextFileCertificateLoginModule.java @@ -32,8 +32,8 @@ import java.util.Set; * The user and role files' locations must be specified in the * org.apache.activemq.jaas.textfiledn.user and * org.apache.activemq.jaas.textfiledn.role properties respectively. NOTE: This - * class will re-read user and group files for every authentication (i.e it does - * live updates of allowed roles and users). + * class will re-read user and group files if they have been modified and the "reload" + * option is true */ public class TextFileCertificateLoginModule extends CertificateLoginModule { diff --git a/docs/user-manual/en/security.md b/docs/user-manual/en/security.md index a0abb3d002..53a6efb7d7 100644 --- a/docs/user-manual/en/security.md +++ b/docs/user-manual/en/security.md @@ -406,6 +406,8 @@ with LDAP is preferable. It is implemented by `org.apache.activemq.artemis.spi.c - `org.apache.activemq.jaas.properties.role` - the path to the file which contains user and role properties +- `reload` - boolean flag; whether or not to reload the properties files when a modification occurs; default is `false` + - `debug` - boolean flag; if `true`, enable debugging; this is used only for testing or debugging; normally, it should be set to `false`, or omitted; default is `false` @@ -575,6 +577,8 @@ login module. The options supported by this login module are as follows: - `org.apache.activemq.jaas.textfiledn.role` - specifies the location of the role properties file (relative to the directory containing the login configuration file). +- `reload` - boolean flag; whether or not to reload the properties files when a modification occurs; default is `false` + In the context of the certificate login module, the `users.properties` file consists of a list of properties of the form, `UserName=StringifiedSubjectDN`. For example, to define the users, system, user, and guest, you could create a file like the following: