Message broker configuration

message-broker/etc/apollo.xml

@@ -0,0 +1,67 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements. See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version
+  2.0 (the "License"); you may not use this file except in compliance
+  with the License. You may obtain a copy of the License at
+  http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+  applicable law or agreed to in writing, software distributed under
+  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+  OR CONDITIONS OF ANY KIND, either express or implied. See the
+  License for the specific language governing permissions and
+  limitations under the License.
+-->
+
+<!--
+  For more information on how configure this file please
+  reference:
+
+  http://activemq.apache.org/apollo/versions/1.6/website/documentation/user-manual.html
+  -->
+<broker xmlns="http://activemq.apache.org/schema/activemq/apollo">
+
+  <notes>
+    Minimal config for Overview development
+  </notes>
+
+  <log_category console="console" security="security" connection="connection" audit="audit"/>
+
+
+  <authentication domain="apollo"/>
+  <!-- Give admins full access -->
+  <access_rule allow="admins" action="*"/>
+  <access_rule allow="*" action="connect" kind="connector"/>
+
+
+  <virtual_host id="broker">
+    <!--
+      You should add all the host names that this virtual host is known as
+      to properly support the STOMP 1.1 virtual host feature.
+      -->
+    <host_name>localhost</host_name>
+
+    <!-- Uncomment to disable security for the virtual host -->
+    <!-- <authentication enabled="false"/> -->
+
+    <!-- Uncomment to disable security for the virtual host -->
+    <!-- <authentication enabled="false"/> -->
+    <access_rule allow="users" action="connect create destroy send receive consume"/>
+
+
+    <!-- You can delete this element if you want to disable persistence for this virtual host -->
+    <leveldb_store directory="${apollo.base}/data"/>
+
+    <queue id="document-set-commands" auto_delete_after="0"/>
+
+  </virtual_host>
+
+
+
+  <web_admin bind="http://127.0.0.1:61680"/>
+
+  <connector id="tcp" bind="tcp://0.0.0.0:61613" connection_limit="2000"/>
+
+
+</broker>

message-broker/etc/black-list.txt

@@ -0,0 +1,7 @@
+# Add to this file the IP address which you want to prohibit
+# from connecting to this server.  Sorry address ranges
+# by netmask are not supported yet.
+#
+
+4.4.4.4
+4.4.4.3

message-broker/etc/groups.properties

@@ -0,0 +1,24 @@
+## ---------------------------------------------------------------------------
+## Licensed to the Apache Software Foundation (ASF) under one or more
+## contributor license agreements.  See the NOTICE file distributed with
+## this work for additional information regarding copyright ownership.
+## The ASF licenses this file to You under the Apache License, Version 2.0
+## (the "License"); you may not use this file except in compliance with
+## the License.  You may obtain a copy of the License at
+##
+## http://www.apache.org/licenses/LICENSE-2.0
+##
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+## ---------------------------------------------------------------------------
+
+#
+# Allows you to place multiple users in a group.
+# Example:
+#
+# power_users=admin|chirino
+#
+admins=admin

message-broker/etc/log4j.properties

@@ -0,0 +1,87 @@
+## ---------------------------------------------------------------------------
+## Licensed to the Apache Software Foundation (ASF) under one or more
+## contributor license agreements.  See the NOTICE file distributed with
+## this work for additional information regarding copyright ownership.
+## The ASF licenses this file to You under the Apache License, Version 2.0
+## (the "License"); you may not use this file except in compliance with
+## the License.  You may obtain a copy of the License at
+## 
+## http://www.apache.org/licenses/LICENSE-2.0
+## 
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+## ---------------------------------------------------------------------------
+
+#
+# Setup the default logging levels
+#
+#
+# Setup the default logging levels
+#
+log4j.rootLogger=WARN, console-warn, apollo
+
+log4j.logger.console=INFO, console-info, apollo
+log4j.additivity.console=false
+log4j.logger.security=INFO, security
+log4j.additivity.security=false
+log4j.logger.connection=INFO, connection
+log4j.additivity.connection=false
+log4j.logger.stacktrace=WARN, stacktrace
+log4j.additivity.stacktrace=false
+
+log4j.logger.org.apache.activemq.apollo=DEBUG
+
+#
+# Uncomment one of the following to enable debug logging
+#
+log4j.logger.org.apache.activemq.apollo.broker=DEBUG
+log4j.logger.org.apache.activemq.apollo.broker.store=DEBUG
+log4j.logger.org.apache.activemq.apollo.stomp=DEBUG
+log4j.logger.org.apache.activemq.apollo.web=DEBUG
+log4j.logger.org.apache.activemq.apollo.cli=DEBUG
+
+# Console Settings
+log4j.appender.console-info=org.apache.log4j.ConsoleAppender
+log4j.appender.console-info.layout=org.apache.log4j.PatternLayout
+log4j.appender.console-info.layout.ConversionPattern=%-5p | %m%n
+log4j.appender.console-info.threshold=INFO
+log4j.appender.console-warn=org.apache.log4j.ConsoleAppender
+log4j.appender.console-warn.layout=org.apache.log4j.PatternLayout
+log4j.appender.console-warn.layout.ConversionPattern=%-5p | %m%n
+log4j.appender.console-warn.threshold=WARN
+
+# File Settings
+log4j.appender.apollo=org.apache.log4j.RollingFileAppender
+log4j.appender.apollo.file=${apollo.base}/log/apollo.log
+log4j.appender.apollo.maxFileSize=5MB
+log4j.appender.apollo.maxBackupIndex=5
+log4j.appender.apollo.append=true
+log4j.appender.apollo.layout=org.apache.log4j.PatternLayout
+log4j.appender.apollo.layout.ConversionPattern=%d | %-5p | %m | %X{stackref}%n
+
+log4j.appender.connection=org.apache.log4j.RollingFileAppender
+log4j.appender.connection.file=${apollo.base}/log/connection.log
+log4j.appender.connection.maxFileSize=5MB
+log4j.appender.connection.maxBackupIndex=5
+log4j.appender.connection.append=true
+log4j.appender.connection.layout=org.apache.log4j.PatternLayout
+log4j.appender.connection.layout.ConversionPattern=%d %m%n
+
+log4j.appender.security=org.apache.log4j.RollingFileAppender
+log4j.appender.security.file=${apollo.base}/log/security.log
+log4j.appender.security.maxFileSize=5MB
+log4j.appender.security.maxBackupIndex=5
+log4j.appender.security.append=true
+log4j.appender.security.layout=org.apache.log4j.PatternLayout
+log4j.appender.security.layout.ConversionPattern=%d %m%n
+
+log4j.appender.stacktrace=org.apache.log4j.RollingFileAppender
+log4j.appender.stacktrace.file=${apollo.base}/log/stacktrace.log
+log4j.appender.stacktrace.maxFileSize=5MB
+log4j.appender.stacktrace.maxBackupIndex=2
+log4j.appender.stacktrace.append=true
+log4j.appender.stacktrace.layout=org.apache.log4j.PatternLayout
+log4j.appender.stacktrace.layout.ConversionPattern=%d | %-5p | stackref=%X{stackref}%n

message-broker/etc/login.config

@@ -0,0 +1,74 @@
+// ---------------------------------------------------------------------------
+// Licensed to the Apache Software Foundation (ASF) under one or more
+// contributor license agreements.  See the NOTICE file distributed with
+// this work for additional information regarding copyright ownership.
+// The ASF licenses this file to You under the Apache License, Version 2.0
+// (the "License"); you may not use this file except in compliance with
+// the License.  You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+// ---------------------------------------------------------------------------
+apollo {
+
+  //
+  // Support accepting/rejecting connections based on the remote IP address.
+  //
+  // The black-list.txt is a text file that contains a new line separated IP address
+  // which are not allowed to connect to this server.
+  //
+  //   adds: org.apache.activemq.apollo.broker.security.SourceAddressPrincipal
+  //
+  org.apache.activemq.apollo.broker.security.SocketAddressLoginModule requisite
+    // Uncomment to use a while list of allowed address that can connect to us
+    // white_list_file="white-list.txt"
+    black_list_file="black-list.txt"
+    ;
+
+  //
+  // Allow ssl certificate based authentication.  All certificates trusted
+  // trusted by the keystore pass authorization.
+  //
+  //   adds: javax.security.auth.x500.X500Principal
+  //
+  org.apache.activemq.apollo.broker.security.CertificateLoginModule optional
+    // Uncomment to explicitly list user distinguished names
+    // dn_file="dn.yaml"
+    ;
+
+  //
+  // Allow user/password authentication checked against the user.properties file.
+  //
+  //   adds: org.apache.activemq.jaas.UserPrincipal
+  //
+  org.apache.activemq.apollo.broker.security.FileUserLoginModule optional
+    file="users.properties";
+
+  //
+  // Maps the cert and password logins to groups using the groups.properties file.
+  //
+  //   adds: org.apache.activemq.jaas.GroupPrincipal
+  //
+  org.apache.activemq.apollo.broker.security.FileGroupLoginModule optional
+    match="org.apache.activemq.jaas.UserPrincipal"
+    file="groups.properties";
+
+  org.apache.activemq.apollo.broker.security.FileGroupLoginModule optional
+    match="javax.security.auth.x500.X500Principal"
+    file="groups.properties";
+
+
+  // If you want to support guests, then uncomment the GuestLoginModule. It
+  // will only kick in if the user does not supply a user id and password and
+  // none of the previous login modules added any principals to the subject.
+
+  // org.apache.activemq.apollo.broker.security.GuestLoginModule optional
+  //   user="guest"    // Keep commented out if you don't want to add a "guest" UserPrincipal
+  //   group="guests"  // Keep commented out if you don't want to add a "guests" GroupPrincipal
+  // ;
+};

message-broker/etc/users.properties

@@ -0,0 +1,26 @@
+## ---------------------------------------------------------------------------
+## Licensed to the Apache Software Foundation (ASF) under one or more
+## contributor license agreements.  See the NOTICE file distributed with
+## this work for additional information regarding copyright ownership.
+## The ASF licenses this file to You under the Apache License, Version 2.0
+## (the "License"); you may not use this file except in compliance with
+## the License.  You may obtain a copy of the License at
+##
+## http://www.apache.org/licenses/LICENSE-2.0
+##
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+## ---------------------------------------------------------------------------
+
+#
+# The list of users that can login.  This file supports both plain text or
+# encrypted passwords.  Here is an example what an encrypted password
+# would look like:
+#
+# admin=ENC(Cf3Jf3tM+UrSOoaKU50od5CuBa8rxjoL)
+#
+
+admin=password