activemq-artemis/examples/protocols/amqp/sasl-scram
Clebert Suconic 0fab0dae91 [maven-release-plugin] prepare for next development iteration 2022-06-07 12:39:09 -04:00
..
src/main ARTEMIS-3106 - apply mvn verify template to the example 2021-04-09 16:23:23 +01:00
pom.xml [maven-release-plugin] prepare for next development iteration 2022-06-07 12:39:09 -04:00
readme.md ARTEMIS-3106 - apply mvn verify template to the example 2021-04-09 16:23:23 +01:00

readme.md

Artemis SASL-SCRAM Server and Client Example

Demonstrates the usage of SASL-SCRAM authentication with ActiveMQ Artemis

To run the example, simply type mvn verify from this directory, or mvn -PnoServer verify if you want to start and create the broker manually.

Of note is the AMQP acceptor configuration restricting the offered mechanisms to SCRAM-SHA-256, and the reference to the login config scope amqp-sasl-scram that holds the relevant SCRAM login module.

  <acceptor name="amqp">tcp://localhost:5672?protocols=AMQP;saslMechanisms=SCRAM-SHA-256;saslLoginConfigScope=amqp-sasl-scram

Also note, the password supplied to the QPID JMS AMQP client is not stored in the users.properties on the broker. It does not leave the client!. The secure encoded form of the password has been generated/registered using:

  java org.apache.activemq.artemis.spi.core.security.jaas.SCRAMPropertiesLoginModule <username> <password> [<iterations>]