Ce contenu n'est pas disponible dans la langue sélectionnée.
Chapter 4. Securing the Management Console
Abstract
The default setting for
Access-Control-Allow-Origin header for the AMQ Management Console permits unrestricted sharing. To restrict access to the AMQ Management Console, create an access management file which contains a list of the allowed origin URLs. To implement the restrictions, add a system property that references the access management file
4.1. Controlling Access to the Fuse Management Console Copier lienLien copié sur presse-papiers!
Copier lienLien copié sur presse-papiers!
Create an access management file called
access-management.xml in <installDir>/etc/. The access management file must contain <allow-origin> sections within a <cors> section. The <allow-origin> section can contain the origin URL provided by browsers with the Origin: header, or a wildcard specification with *. For example:
Add the following line to AMQ config script
./bin/setenv, adding the path to the access management file.
export EXTRA_JAVA_OPTS='-Djolokia.policyLocation=file:etc/access-management.xml'
export EXTRA_JAVA_OPTS='-Djolokia.policyLocation=file:etc/access-management.xml'
When the command
./bin/fuse is executed, the access management file is referenced and used to restrict access to the AMQ Management Console.