From 36937e6b6fe1f10498396f80184aeafd8a7ab33c Mon Sep 17 00:00:00 2001
From: Jonas Karlsson <thejonas@gmail.com>
Date: Fri, 31 May 2013 15:17:17 -0400
Subject: [PATCH] Message broker configuration

---
 message-broker/etc/apollo.xml        |  67 +++++++++++++++++++++
 message-broker/etc/black-list.txt    |   7 +++
 message-broker/etc/groups.properties |  24 ++++++++
 message-broker/etc/keystore          | Bin 0 -> 3730 bytes
 message-broker/etc/log4j.properties  |  87 +++++++++++++++++++++++++++
 message-broker/etc/login.config      |  74 +++++++++++++++++++++++
 message-broker/etc/users.properties  |  26 ++++++++
 7 files changed, 285 insertions(+)
 create mode 100644 message-broker/etc/apollo.xml
 create mode 100644 message-broker/etc/black-list.txt
 create mode 100644 message-broker/etc/groups.properties
 create mode 100644 message-broker/etc/keystore
 create mode 100644 message-broker/etc/log4j.properties
 create mode 100644 message-broker/etc/login.config
 create mode 100644 message-broker/etc/users.properties

diff --git a/message-broker/etc/apollo.xml b/message-broker/etc/apollo.xml
new file mode 100644
index 000000000..7fb595cc9
--- /dev/null
+++ b/message-broker/etc/apollo.xml
@@ -0,0 +1,67 @@
+<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
+<!--
+  Licensed to the Apache Software Foundation (ASF) under one or more
+  contributor license agreements. See the NOTICE file distributed with
+  this work for additional information regarding copyright ownership.
+  The ASF licenses this file to You under the Apache License, Version
+  2.0 (the "License"); you may not use this file except in compliance
+  with the License. You may obtain a copy of the License at
+  http://www.apache.org/licenses/LICENSE-2.0 Unless required by
+  applicable law or agreed to in writing, software distributed under
+  the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES
+  OR CONDITIONS OF ANY KIND, either express or implied. See the
+  License for the specific language governing permissions and
+  limitations under the License.
+-->
+
+<!--
+  For more information on how configure this file please
+  reference:
+
+  http://activemq.apache.org/apollo/versions/1.6/website/documentation/user-manual.html
+  -->
+<broker xmlns="http://activemq.apache.org/schema/activemq/apollo">
+
+  <notes>
+    Minimal config for Overview development
+  </notes>
+
+  <log_category console="console" security="security" connection="connection" audit="audit"/>
+
+  
+  <authentication domain="apollo"/>
+  <!-- Give admins full access -->
+  <access_rule allow="admins" action="*"/>
+  <access_rule allow="*" action="connect" kind="connector"/>
+  
+
+  <virtual_host id="broker">
+    <!--
+      You should add all the host names that this virtual host is known as
+      to properly support the STOMP 1.1 virtual host feature.
+      -->
+    <host_name>localhost</host_name>
+
+    <!-- Uncomment to disable security for the virtual host -->
+    <!-- <authentication enabled="false"/> -->
+
+    <!-- Uncomment to disable security for the virtual host -->
+    <!-- <authentication enabled="false"/> -->
+    <access_rule allow="users" action="connect create destroy send receive consume"/>
+    
+
+    <!-- You can delete this element if you want to disable persistence for this virtual host -->
+    <leveldb_store directory="${apollo.base}/data"/>
+    
+    <queue id="document-set-commands" auto_delete_after="0"/>
+ 
+  </virtual_host>
+
+
+
+  <web_admin bind="http://127.0.0.1:61680"/>
+ 
+  <connector id="tcp" bind="tcp://0.0.0.0:61613" connection_limit="2000"/>
+ 
+
+</broker>
diff --git a/message-broker/etc/black-list.txt b/message-broker/etc/black-list.txt
new file mode 100644
index 000000000..802069eb5
--- /dev/null
+++ b/message-broker/etc/black-list.txt
@@ -0,0 +1,7 @@
+# Add to this file the IP address which you want to prohibit
+# from connecting to this server.  Sorry address ranges
+# by netmask are not supported yet.
+#
+
+4.4.4.4
+4.4.4.3
\ No newline at end of file
diff --git a/message-broker/etc/groups.properties b/message-broker/etc/groups.properties
new file mode 100644
index 000000000..52766c6ef
--- /dev/null
+++ b/message-broker/etc/groups.properties
@@ -0,0 +1,24 @@
+## ---------------------------------------------------------------------------
+## Licensed to the Apache Software Foundation (ASF) under one or more
+## contributor license agreements.  See the NOTICE file distributed with
+## this work for additional information regarding copyright ownership.
+## The ASF licenses this file to You under the Apache License, Version 2.0
+## (the "License"); you may not use this file except in compliance with
+## the License.  You may obtain a copy of the License at
+##
+## http://www.apache.org/licenses/LICENSE-2.0
+##
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+## ---------------------------------------------------------------------------
+
+#
+# Allows you to place multiple users in a group.
+# Example:
+#
+# power_users=admin|chirino
+#
+admins=admin
\ No newline at end of file
diff --git a/message-broker/etc/keystore b/message-broker/etc/keystore
new file mode 100644
index 0000000000000000000000000000000000000000..603e16cc42e6b30bb93f4b1a752760b9b2561b19
GIT binary patch
literal 3730
zcmZveS2P@q7KLZVAbPJ+qIbsVy)!z|iC#w+L>E0o2_ae-J$fXgBq4eU38DuvBZAS5
z`s-ZxuKREw?!$iAXRUM2%eVI0w|lpH0001VFW`TK=k(Oi%k}BKRZIkXI|2X%Nsu^#
zI0z{op#UBb4CDt<0D-swa2$azQH90){!;>OACd}=<X>OkqYY9D6Zm1N5WH+T&_e8o
z4qtkUEf6J{0#V%9&R2uEMS!O37$v1ig(LkK&#@i0o9od41z~52w!aXJd4|xF4p*8j
zi^-I*vsorDCNzIjaV5l@omm9@Q6xgkGwb5IE1z4EdLp{T;&v{7(obD!W$ep|IpXG3
zP5|#zXY;qu+A8s_{+k6I37$TE<V5BQVPstNHmSqJX$V{mI(D_sk><tA2dVtI!RMIC
ztKyKp-GcTTXX~kyCWR`Pol4*+s9#^X?<M@O-J`SV_t;v(1Bdbr#<YEN7TZ+L-v!g$
z7$)EGl=>xsy`9kjg5QIvL?}uO*9762@=9E2b8a?k(T4u7eGR}-D2m-11o^O?h|x{_
zc`X(bL0d~F47S>bJ!M4ku+&~nhnc=UB_}@`u1rofSZG4ml5~JI-7?2AEp-B}p%x-@
z{`jPGaLwo1PK1QN2C!4tA}h^ehT(DPle$P9ed*BL@WP{*yvNI!NqO*2nD+>GvPAmy
zo$2Gdl_U{F__xw;RPJl->)kFRWEIEn@&bH@#SMMNarsyTYHvKt`pPTn--Oz2k?b0y
zI*W3Wm9fzppNOhWo#@i_muLh$)ObjDFwu;4Sy6xBf_1R7dKw*?egS-sQnhj!95mw9
z0NYlOc!X8%AJZobcV=5|Uz!-;sC3?HYr%`$hc#S@x@6xep1E8Mf4%|wU|+u&mg3ou
zm?T}*PviG1&6aG9EFhnh!o#`z%tlI*?eIM5_RC2=F42!&HAq#`lLtcda?csgRO$=t
zJd0REOTF6Cs@GmJnl>`1$o`y(?i+v>Tu<Ph@HMrCDY(~CpiS6{B0J7E9%`JsuD1&<
z=E9y|3d31%eEceRxS|HC=psu}q!u^D-~s(laWEA6@tu!HroLn3A#y-o6>K&0!7kVL
z-db8rA+>oC9r71k46)iG9t7F-l`k6S;tp%Rr3y=G5<5IzdC!Y-8LMP|_PecyrrIh#
zEY3-EDd-IeafsWJ*$vjz@`m3qRA2lcCa^j1lc3|>C-P=o&*c*57M(mQda9Rv-<4+&
z8Qg!}YL&LYR)p4!x9%rS)aUG*w~q<o6k9TeJ9c)>S1RV!NOR-zd=gOwzSm<&`hynw
zDgPGOnYx;?3GGL~R3>M*MaE<r6R$CGSA;*yW*(hh8Wsra?&_4ICgs^_BV`ubwV&95
zg&~#p28=vBN1huNa33}ZP@anv(ANrT%1Gyq7;-rOxc0AmD@>#s*(h>B87p42$0VH6
zHE<-sD_NEo+-{RMMh`IUE9f4Ru56B~kE%`;+4ZX%oDKIsquEn*$0>&k+yK{>tZubz
z7#LouU5^k`QF-&BQ(nwaYfyJC0$LGt4F#19F8g7!t@;NMR&Cqk^rQy@bc;Z@u4fS;
z-Fy=0y>8l|3F2wEZi1fA$jO=NJcI^wIzbtwm3aNbhCLTkl9I?6m2f<Jxuu!dFZ|a;
zL)EUiB4s>pCWF#MEcGH8;QveWOG`+a_Kb{v8aq;UCPc$1VQ^^}&6ar51eSP(@|d`4
zeehbEbk!~?*WGqMqf|<1Ub~+#8(#aWdjh&pBcAIO5HVz?PL4M-iVyn`H+bXVR5a5d
ze{0<0_IfaGB$SB^@RO^9>w%QuMVIUsHy$A~OtN%GyP||JJb%=^x8X8CwJIUs%O3xr
zDvP!B>iq&(Q}2x^Z;m)0%G-;Gw^KPbN-&YWQ$;1cWN|dvShbk}_T)aTwrhcyqLEtK
zclGElos6XHCACDRV8RK?4*$9OuWbrS6A26m?vet9vPXR;dP#_V<d1VaF?J@y?bA~a
zOb4LJx{i*-t94p*;nMgK)I3NpvuU8<8HKCs!8J)vbZ?0MpX)txpQbiTK6=S{83_V#
z!gL64>;oK`IyJ|p8)xXY-Z29wOVq+@wk9SCZ%2D$wPW#w*~qfl{k$#7dDaghK%|!!
z&PA92TgLZs>S^SGNe^amAf?q+I6KtBTZL6MgTBnOOd!TP9n<Q_4n0(XkR*v+YuTra
zzJrG=3}D0&+uEn}*zENcVW)7kLxv&Cc1LFk|6oF%$v(z=AYkOH!l|G!sS^DI5k67p
z;D%YnEdKO~O9eHY-ILB~QV3G5@T<MyW!^jQfk_1p6{C_C^@4O2pWSp=0GoOrj?1Z$
zyugFW+G9)MXUw(J-F3Gk5|?Sw!foH*30M;}<3`EI84$jkpCh=dF+CTs-_ifbBvv3~
z>F6Np$#6c6O<d{z`v`JWTlo<_L~@b}Tc0B`y=-^AOt+ZwpNA3D8<_D()6O=&^?CR*
zN~mg-=lNf~L)rHH=}j7{CTX^i7pME8gfr=+GnWkG{?V!q^-2JH*SEG5)qyR@W5PCT
z_0^u*dC9+Jos7_m<g3%MTWPak5}s$6y@&;T3@yEUcR=zxZmcclixiZAD-$_dyw#;j
z$8Rr&i=`;8x};NsjtUBv_63@Ml@)1!WCG6V#d&oIHf)3p=e7+(58jq66I&A%2KV3w
zc(npARJB|Osj36YBf6>57Bhi@#_*-&aH{xbX>iw#HeU09SG@Ec1YN-2Yn#&Qpu%>n
zX3x0OCpL5`hFh6h+xutL(w_Zj=VDoxHHMh1eR7)K7yYcF8$4>fLh7RWjc=WRpUeNE
z@&kgv#L8LsW=M1)Yf;*l=JSN0NRB(DucdDhL6R?*oMmM2lF#g$Y%e8_0O}~QVO4z`
zRC6h@m6f$Jb0#tL0Uod7B0Zf+J?qyjr1K~DvqL^xRTr9-AgqN+!^kyeDfupj;iYa_
z&sz|W^w(kL*ucYOMT74>+o-&w3?A~C8wj0Pl_$@%wcFLRz&l>v%4)z#M~&)RNx1Nq
zT@%#N${8B-*Q+d0M-_S=b+?E?q1&hG%dsqJc^uF%c3+XHWwPEILw#)AaAeN#fpVCg
zt&Sx}jUR54ES5LiLsPu2nRWQpZWuRT<M1Qw?`o2}jOeEGjUeSvalsS?qw~B1VCS*2
zt<Twgh=%tLt(lJ4R*g0d_G^4K+>cdT4TgCB(w_QI9Oy|}_JcX={G4Z`!mUgGLk?);
z3yR_w+0{B)heiL*a$(s#PlmQBPC90k;}P|v4(OA=qetgF2u|yVXRqr+WsB9b+dL;z
z2{w$icu&hxyIrtCc1OX}U7|%Fi`7k}1%==ji@y|K3idpn=8gVOJHxdUmVn3r0N_DL
z9Jm(}2dXW_0RcfEu<n);IfMj{fIkVAbVdRM65#?M6ryDJBOEg@4%L5K9fXCBL{tnS
z0g)D!6o*L2SksX}|7|7zYyaO$9EkmY58rn`oH!5};QluuC=LV!WN`+^dqjoEnat{m
zhqhGzbEwFrttY947g2Q1cr^5FF)?y@w4M^CL$DI(*(MTi2bvyfgkC{Yi_EM?^p2UN
z%hg^HhTWo(prt?+RzLOmvLO}Aq7^G1C5zmm4^J4wx$9GKrq9SCB{uO5BUir3oRRL;
z2(ssk4)F=$rugEaMeK%vhW~ixiKaS7g|SUgH>J=DVB)W=h`7{;1vyzw3oY@RRZuT1
zR>FIyJxY#|QhR;6IPL6LxBE=ia?8juH2J8Fts8!Uy|DG<K$N`%6`f@4eoc6OX_0cb
z-J95Gr3Aj0$r9OPpJiZaVR}w|YqZ?${;2}FA!+cX_e9BB5Go5KUqN4DIi$HK+ja4Y
zQA#2|wexwxR&>YU5o6-x0~ZGfJ@oC|ucoXd>OJ#fmM@Q0^j&E{fvTgEl9^bO_&W_j
zMlT$Uv8IzZaB=uJWpb}0Za4a{E!kjP&#@9AkIKTbvYVJWAky6&B>cwy9PD$&)Z8Ev
z0#ih>uYItL8Aj|jWv#A^La5Cvj!RmJBB4aGmyY|f3PnMqAduHEp~A!^9GdV6;;P$V
zq9CR4B<iV+4Q{AgQU3*Py578J=g5E{cN)_bbS-uL_EZO=llDUEh{NgknqOUceB8H<
zV3Xrhvr(HeviG&l$-4vTKO^_@O(h#@s^!%#oOCEaI6wfff(^n7VZLXLnG{S5rY0@9
zbNKL=WSMggm}MED-Q&Go82-Ny-P3sw5fI>i`NaLo<E}8(2ow}XXmn!8cb&<;bHf%n
zX`4^L{F-zk@HCb2@e6!BO*b{7*(~v2EI$0agWJIz=*>^HLqaOyrGP+O#eQ@Uom^-h
z=Q>aH!z7G<H=NrXxh!(=(eG5^cYnWrbg&FDe&vKm3E$${Klo2qwGhD$V{h(ioIs7{
z`xcSCUBq>#19qAK0LkL-{uoNy8;WFD%J<3~?n}SnlA4LQHfM7#H~Jnm6|rJ5V~t(N
z^Cp+D96#o_6hx9SJUJr16!=3n5H7nJ14z_y^vVo@LGnds=y-*xj>xbyW*zy%o5R$x
z$IU)D$%`z%0Cly%dx%eH>M%B7F;%{Og-XG}+-B!W;F+=2J6he8OMqc3IUj*LD`@z0
zb~>`218dQWw9Ce;XYdKn=@bEVqtVVZgy@7px58PK<;gk#ab@&oqak+`Ran1K?qvh5
z=->XCrOO!M8Nx>VC)V_LnnHlOR<0J?K1xo=(KRcES10M8>#4f$8l>Z%K_p3Y{qV;{
zu`54lXsvwwz#SdCrDdD}HKOw>{f}_QJ^{c1{Q!AJ_@a_teUy1iBl4C+zY*PP&D1>`
z_#E}k&7xDt+<>V1r_Kjj*LOP`4JIp-pQL<hx&M?Ud#Hu4NfdJ`8mU@JF~}0==O5$k
rGhTN|s?r?Vm9fzyE7QyQ@^)71;XjAz^10185Dy~Pm-u<PaWnq~fpOp1

literal 0
HcmV?d00001

diff --git a/message-broker/etc/log4j.properties b/message-broker/etc/log4j.properties
new file mode 100644
index 000000000..252fbd89f
--- /dev/null
+++ b/message-broker/etc/log4j.properties
@@ -0,0 +1,87 @@
+## ---------------------------------------------------------------------------
+## Licensed to the Apache Software Foundation (ASF) under one or more
+## contributor license agreements.  See the NOTICE file distributed with
+## this work for additional information regarding copyright ownership.
+## The ASF licenses this file to You under the Apache License, Version 2.0
+## (the "License"); you may not use this file except in compliance with
+## the License.  You may obtain a copy of the License at
+## 
+## http://www.apache.org/licenses/LICENSE-2.0
+## 
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+## ---------------------------------------------------------------------------
+
+#
+# Setup the default logging levels
+#
+#
+# Setup the default logging levels
+#
+log4j.rootLogger=WARN, console-warn, apollo
+
+log4j.logger.console=INFO, console-info, apollo
+log4j.additivity.console=false
+log4j.logger.security=INFO, security
+log4j.additivity.security=false
+log4j.logger.connection=INFO, connection
+log4j.additivity.connection=false
+log4j.logger.stacktrace=WARN, stacktrace
+log4j.additivity.stacktrace=false
+
+log4j.logger.org.apache.activemq.apollo=DEBUG
+
+#
+# Uncomment one of the following to enable debug logging
+#
+log4j.logger.org.apache.activemq.apollo.broker=DEBUG
+log4j.logger.org.apache.activemq.apollo.broker.store=DEBUG
+log4j.logger.org.apache.activemq.apollo.stomp=DEBUG
+log4j.logger.org.apache.activemq.apollo.web=DEBUG
+log4j.logger.org.apache.activemq.apollo.cli=DEBUG
+
+# Console Settings
+log4j.appender.console-info=org.apache.log4j.ConsoleAppender
+log4j.appender.console-info.layout=org.apache.log4j.PatternLayout
+log4j.appender.console-info.layout.ConversionPattern=%-5p | %m%n
+log4j.appender.console-info.threshold=INFO
+log4j.appender.console-warn=org.apache.log4j.ConsoleAppender
+log4j.appender.console-warn.layout=org.apache.log4j.PatternLayout
+log4j.appender.console-warn.layout.ConversionPattern=%-5p | %m%n
+log4j.appender.console-warn.threshold=WARN
+
+# File Settings
+log4j.appender.apollo=org.apache.log4j.RollingFileAppender
+log4j.appender.apollo.file=${apollo.base}/log/apollo.log
+log4j.appender.apollo.maxFileSize=5MB
+log4j.appender.apollo.maxBackupIndex=5
+log4j.appender.apollo.append=true
+log4j.appender.apollo.layout=org.apache.log4j.PatternLayout
+log4j.appender.apollo.layout.ConversionPattern=%d | %-5p | %m | %X{stackref}%n
+
+log4j.appender.connection=org.apache.log4j.RollingFileAppender
+log4j.appender.connection.file=${apollo.base}/log/connection.log
+log4j.appender.connection.maxFileSize=5MB
+log4j.appender.connection.maxBackupIndex=5
+log4j.appender.connection.append=true
+log4j.appender.connection.layout=org.apache.log4j.PatternLayout
+log4j.appender.connection.layout.ConversionPattern=%d %m%n
+
+log4j.appender.security=org.apache.log4j.RollingFileAppender
+log4j.appender.security.file=${apollo.base}/log/security.log
+log4j.appender.security.maxFileSize=5MB
+log4j.appender.security.maxBackupIndex=5
+log4j.appender.security.append=true
+log4j.appender.security.layout=org.apache.log4j.PatternLayout
+log4j.appender.security.layout.ConversionPattern=%d %m%n
+
+log4j.appender.stacktrace=org.apache.log4j.RollingFileAppender
+log4j.appender.stacktrace.file=${apollo.base}/log/stacktrace.log
+log4j.appender.stacktrace.maxFileSize=5MB
+log4j.appender.stacktrace.maxBackupIndex=2
+log4j.appender.stacktrace.append=true
+log4j.appender.stacktrace.layout=org.apache.log4j.PatternLayout
+log4j.appender.stacktrace.layout.ConversionPattern=%d | %-5p | stackref=%X{stackref}%n
diff --git a/message-broker/etc/login.config b/message-broker/etc/login.config
new file mode 100644
index 000000000..42da8d6a1
--- /dev/null
+++ b/message-broker/etc/login.config
@@ -0,0 +1,74 @@
+// ---------------------------------------------------------------------------
+// Licensed to the Apache Software Foundation (ASF) under one or more
+// contributor license agreements.  See the NOTICE file distributed with
+// this work for additional information regarding copyright ownership.
+// The ASF licenses this file to You under the Apache License, Version 2.0
+// (the "License"); you may not use this file except in compliance with
+// the License.  You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+// ---------------------------------------------------------------------------
+apollo {
+
+  //
+  // Support accepting/rejecting connections based on the remote IP address.
+  //
+  // The black-list.txt is a text file that contains a new line separated IP address
+  // which are not allowed to connect to this server.
+  //
+  //   adds: org.apache.activemq.apollo.broker.security.SourceAddressPrincipal
+  //
+  org.apache.activemq.apollo.broker.security.SocketAddressLoginModule requisite
+    // Uncomment to use a while list of allowed address that can connect to us
+    // white_list_file="white-list.txt"
+    black_list_file="black-list.txt"
+    ;
+
+  //
+  // Allow ssl certificate based authentication.  All certificates trusted
+  // trusted by the keystore pass authorization.
+  //
+  //   adds: javax.security.auth.x500.X500Principal
+  //
+  org.apache.activemq.apollo.broker.security.CertificateLoginModule optional
+    // Uncomment to explicitly list user distinguished names
+    // dn_file="dn.yaml"
+    ;
+
+  //
+  // Allow user/password authentication checked against the user.properties file.
+  //
+  //   adds: org.apache.activemq.jaas.UserPrincipal
+  //
+  org.apache.activemq.apollo.broker.security.FileUserLoginModule optional
+    file="users.properties";
+
+  //
+  // Maps the cert and password logins to groups using the groups.properties file.
+  //
+  //   adds: org.apache.activemq.jaas.GroupPrincipal
+  //
+  org.apache.activemq.apollo.broker.security.FileGroupLoginModule optional
+    match="org.apache.activemq.jaas.UserPrincipal"
+    file="groups.properties";
+
+  org.apache.activemq.apollo.broker.security.FileGroupLoginModule optional
+    match="javax.security.auth.x500.X500Principal"
+    file="groups.properties";
+
+
+  // If you want to support guests, then uncomment the GuestLoginModule. It
+  // will only kick in if the user does not supply a user id and password and
+  // none of the previous login modules added any principals to the subject.
+
+  // org.apache.activemq.apollo.broker.security.GuestLoginModule optional
+  //   user="guest"    // Keep commented out if you don't want to add a "guest" UserPrincipal
+  //   group="guests"  // Keep commented out if you don't want to add a "guests" GroupPrincipal
+  // ;
+};
\ No newline at end of file
diff --git a/message-broker/etc/users.properties b/message-broker/etc/users.properties
new file mode 100644
index 000000000..e73d339a6
--- /dev/null
+++ b/message-broker/etc/users.properties
@@ -0,0 +1,26 @@
+## ---------------------------------------------------------------------------
+## Licensed to the Apache Software Foundation (ASF) under one or more
+## contributor license agreements.  See the NOTICE file distributed with
+## this work for additional information regarding copyright ownership.
+## The ASF licenses this file to You under the Apache License, Version 2.0
+## (the "License"); you may not use this file except in compliance with
+## the License.  You may obtain a copy of the License at
+##
+## http://www.apache.org/licenses/LICENSE-2.0
+##
+## Unless required by applicable law or agreed to in writing, software
+## distributed under the License is distributed on an "AS IS" BASIS,
+## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+## See the License for the specific language governing permissions and
+## limitations under the License.
+## ---------------------------------------------------------------------------
+
+#
+# The list of users that can login.  This file supports both plain text or
+# encrypted passwords.  Here is an example what an encrypted password
+# would look like:
+#
+# admin=ENC(Cf3Jf3tM+UrSOoaKU50od5CuBa8rxjoL)
+#
+
+admin=password
\ No newline at end of file