Page History

The Qpid Java Broker has a single reference source (PrincipalDatabase) that defines all the users in the system.

...

The plain file has the following format:

# Plain password authentication file.
# default name : passwd
# Format <username>:<password>
#e.g.
martin:password

...

The location of the password file in use for your broker is as configured in your config.xml file.

<principal-databases>
            <principal-database>
                <name>passwordfile</name>
                <class>org.apache.qpid.server.security.auth.database.PlainPasswordFilePrincipalDatabase</class>
                <attributes>
                    <attribute>
                        <name>passwordFile</name>
                        <value>${conf}/passwd</value>
                    </attribute>
                </attributes>
            </principal-database>
        </principal-databases>

So in the example config.xml file this password file lives in the directory specified as the conf directory (at the top of your config.xml file).

If you wish to use Base64 encoding for your password file, then in the <class> element above you should specify org.apache.qpid.server.security.auth.database.Base64MD5PasswordFilePrincipalDatabase

The default is:

 <conf>${prefix}/etc</conf>

...

The Base64MD5 file uses the following format:

# Base64MD5 password authentication file
# default name : qpid.passwd
# Format <username>:<Base64 Encoded MD5 hash of the users password>
#e.g.
martin:X03MO1qnZdYdgyfeuILPmQ==

...

1. Edit the file by hand using the qpid-passwd tool that will generate the required lines. The output from the tool is the text that needs to be copied in to your active password file. This tool is located in the broker bin directory.
   Eventually it is planned for this tool to emulate the functionality of htpasswd for qpid passwd files.
   NOTE: For the changes to be seen by the broker you must either restart the broker or reload the data with the management tools (see Qpid JMX Management Console User Guide)
2. Use the management tools to create a new user. The changes will be made by the broker to the password file and the new user will be immediately available to the system (see Qpid JMX Management Console User Guide).

Dynamic changes to password files.

...

To make changes dynamically there are two options, both require administrator access via the Management Console (see Qpid JMX Management Console User Guide)

1. You can replace the file and use the console to reload its contents.
2. The management console provides an interface to create, delete and amend the users. These changes are written back to the active password file.

...