Apache
/
activemq-artemis
mirror of https://github.com/apache/activemq-artemis.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

This closes #594

This commit is contained in:
Martyn Taylor 2016-06-21 10:12:10 +01:00
parent f10338a9b2 e1b6393f70
commit 372528d841
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
artemis-server/src/main/java/org/apache/activemq/artemis/spi/core/security/jaas/TextFileCertificateLoginModule.java
View File

@ -32,8 +32,8 @@ import java.util.Set;
* The user and role files' locations must be specified in the * The user and role files' locations must be specified in the
* org.apache.activemq.jaas.textfiledn.user and * org.apache.activemq.jaas.textfiledn.user and
* org.apache.activemq.jaas.textfiledn.role properties respectively. NOTE: This * org.apache.activemq.jaas.textfiledn.role properties respectively. NOTE: This
* class will re-read user and group files for every authentication (i.e it does * class will re-read user and group files if they have been modified and the "reload"
* live updates of allowed roles and users). * option is true
*/ */
public class TextFileCertificateLoginModule extends CertificateLoginModule { public class TextFileCertificateLoginModule extends CertificateLoginModule {

4
docs/user-manual/en/security.md
View File

@ -406,6 +406,8 @@ with LDAP is preferable. It is implemented by `org.apache.activemq.artemis.spi.c
- `org.apache.activemq.jaas.properties.role` - the path to the file which contains user and role properties - `org.apache.activemq.jaas.properties.role` - the path to the file which contains user and role properties
- `reload` - boolean flag; whether or not to reload the properties files when a modification occurs; default is `false`
- `debug` - boolean flag; if `true`, enable debugging; this is used only for testing or debugging; normally, it - `debug` - boolean flag; if `true`, enable debugging; this is used only for testing or debugging; normally, it
should be set to `false`, or omitted; default is `false` should be set to `false`, or omitted; default is `false`
@ -575,6 +577,8 @@ login module. The options supported by this login module are as follows:
- `org.apache.activemq.jaas.textfiledn.role` - specifies the location of the role properties file (relative to the - `org.apache.activemq.jaas.textfiledn.role` - specifies the location of the role properties file (relative to the
directory containing the login configuration file). directory containing the login configuration file).
- `reload` - boolean flag; whether or not to reload the properties files when a modification occurs; default is `false`
In the context of the certificate login module, the `users.properties` file consists of a list of properties of the form, In the context of the certificate login module, the `users.properties` file consists of a list of properties of the form,
`UserName=StringifiedSubjectDN`. For example, to define the users, system, user, and guest, you could create a file like `UserName=StringifiedSubjectDN`. For example, to define the users, system, user, and guest, you could create a file like
the following: the following: