3.3. Enable password encryption for non-fabric environment in A-MQ
Red Hat JBoss A-MQ provides a set of options for enabling password encryption. To protect the passwords, you must set the file permissions of the
users.properties file so that it can be read only by administrators. To provide additional protection, you can also encrypt the stored passwords using a message digest algorithm.
To enable the password encryption feature using the MD algorithm, follow the below instructions:
- Edit the
InstallDir/etc/org.apache.karaf.jaas.cfgfile. - For example, the following settings would enable basic encryption using the MD5 message digest algorithm:
encryption.enabled = true encryption.name = basic encryption.prefix = {CRYPT} encryption.suffix = {CRYPT} encryption.algorithm = MD5 encryption.encoding = hexadecimal
Note
The encryption settings in the
org.apache.karaf.jaas.cfg file are applied only to the default karaf realm in a standalone container.
