Hello DK-

ActiveMQ uses the standard Java JDK parameters for enabling JMX.

The JMX flag for using the ‘activemq' JAAS login context name is:

-Dcom.sun.management.jmxremote.login.config=activemq 

Modifications to ActiveMQ’s startup is needed to add a classpath used by your 
custom JAAS module — adding them to the lib/ folder is not enough, you need to 
set the classpath with “-cp”.

I replied to your SO post as well.

Thanks,
Matt Pavlovich


> On May 3, 2023, at 12:30 AM, Dnyaneshwar Kulkarni 
> <dnyaneshwar.kulkar...@gmail.com> wrote:
> 
> Hi Matt,
> 
> Thank you for your response. Currently I
>  have created own custom login module and updated login config with the 
> module. Provided that login config in jvm parameter also provided the module 
> name which I want to use. Also updated the activemq.xml file to include 
> jaasplugin. Still my custom login module is not getting called and it is 
> going with default FileLoginModule.
> 
> I have created below stack overflow question for your reference.
> 
> https://stackoverflow.com/questions/76111997/how-we-can-write-our-custom-jaas-login-implementation-read-the-encrypted-passwor?noredirect=1#comment134303903_76111997
> 
> Can you please help me to find out why it is not working? I something that 
> I'm doing wrong?
> 
> Thank you.
> 
> Regards,
> DK
> 
> 
> On Tue, 2 May 2023, 20:33 Matt Pavlovich, <mattr...@gmail.com 
> <mailto:mattr...@gmail.com>> wrote:
>> Hello DK-
>> 
>> Yes, reconfiguring JMX to use JAAS would be the approach to use encrypted 
>> passwords. 
>> 
>> I plan on converting the Apache distribution to use JAAS for JMX by default 
>> in an upcoming release. For now, you’ll need to convert it yourself.
>> 
>> Related JIRA:
>> https://issues.apache.org/jira/browse/AMQ-8391
>> 
>> Thanks,
>> Matt Pavlovich 
>> 
>> > On May 2, 2023, at 1:44 AM, Dnyaneshwar Kulkarni 
>> > <dnyaneshwar.kulkar...@gmail.com <mailto:dnyaneshwar.kulkar...@gmail.com>> 
>> > wrote:
>> > 
>> > Hi Team,
>> > 
>> > We have enabled the JMX support in our application for activemq. In
>> > actimmq.sql file we have added the Managmentcontext with create connection
>> > as "true". We have provided the path for jmx.access file jmx password file
>> > for the security. As these files are having plain text data we want to to
>> > use encrypted data.
>> > 
>> > To provide the custom login to support encryption i tried to add JAAS, but
>> > seems like with MBean server it is not working.
>> > 
>> > Is there way by which I can achieve this?
>> > 
>> > Thanks in advance.
>> > 
>> > Regards,
>> > DK
>> 

Reply via email to