7.6.2. Configuring ActiveMQ

Procedure 7.13. To Secure the ActiveMQ Console:

1. Ensure authentication is enabled:

   # sed -i -e '/name="authenticate"/s/false/true/' /etc/activemq/jetty.xml

2. For the console to answer only on the localhost interface, check the /etc/activemq/jetty.xml file. Ensure that the Connector bean has the host property with the value of 127.0.0.1.

   Example 7.5. Connector Bean Configuration

   <bean id="Connector" class="org.eclipse.jetty.server.nio.SelectChannelConnector">
         <!-- see the jettyPort bean -->
         <property name="port" value="#{systemProperties['jetty.port']}" />
         <property name="host" value="127.0.0.1" />
   </bean>
   

3. Ensure that the line for the admin user in the /etc/activemq/jetty-realm.properties file is uncommented, and change the default password to a unique one. User definitions in this file take the following form:

   username: password [,role ...]

   Example 7.6. admin User Definition

   admin: password, admin

4. Restart the activemq service for the changes to take effect:

   # service activemq restart