[ https://issues.apache.org/jira/browse/AMQ-8391?focusedWorklogId=889275&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-889275 ]
ASF GitHub Bot logged work on AMQ-8391: --------------------------------------- Author: ASF GitHub Bot Created on: 07/Nov/23 14:38 Start Date: 07/Nov/23 14:38 Worklog Time Spent: 10m Work Description: jbonofre merged PR #1100: URL: https://github.com/apache/activemq/pull/1100 Issue Time Tracking ------------------- Worklog Id: (was: 889275) Time Spent: 4h 10m (was: 4h) > Migrate jetty to use shared JAAS realm with messaging > ----------------------------------------------------- > > Key: AMQ-8391 > URL: https://issues.apache.org/jira/browse/AMQ-8391 > Project: ActiveMQ > Issue Type: Task > Reporter: Matt Pavlovich > Assignee: Matt Pavlovich > Priority: Major > Fix For: 6.0.0 > > Time Spent: 4h 10m > Remaining Estimate: 0h > > Currently, the default Apache ActiveMQ distribution has 3 user and group > backends-- jmx, messaging and web. > Update: > 1. Migrate the jetty.xml to use the JAAS backend used for messaging > 2. Add the jaasAuthentication to default activemq.xml (so it is explicitly > visible) > 3. Update the web-console servlet to permite access via 'web-console-role' > 4. Update the api servlet to allow access using 'rest-role' > 5. Add admin to the 'web-console-role' and 'rest-role' by default > 6. Migrate jmx to use the 'activemq' realm > 7. Create default jmx-readwrite-role and jmx-readonly-role roles in the > conf/jmx.access file > 8. Include the config breaking change in release notes -- This message was sent by Atlassian Jira (v8.20.10#820010)