WARNING: Security risk! It has been detected that the cluster admin user and password have not been changed from the installation default.

[sudovenko]

Hi guys,

Do you know how can I get rid of this message in the embedded version of HQ (no config files) ?

"WARNING: Security risk! It has been detected that the cluster admin user and password have not been changed from the installation default."

Best regards,

Steve

[clebert.suconic]

With all due respect, GIYF, RTM...

http://docs.jboss.org/hornetq/2.2.14.Final/user-manual/en/html/clusters.html#clusters.clusteruser

http://www.google.com/#hl=en&tbo=d&output=search&sclient=psy-ab&q=Security+risk!+It+has+been+detected+that+the+cluster+admin+user+and+password+have+not+been+changed+from+the+installation+default.&oq=Security+risk!+It+has+been+detected+that+the+cluster+admin+user+and+password+have+not+been+changed+from+the+installation+default.&gs_l=hp.12...876.876.0.2735.1.1.0.0.0.0.0.0..0.0.les%3Bekjrth..0.1...1.2.BERPwWopK4M&pbx=1&bav=on.2,or.r_gc.r_pw.r_cp.r_qf.&fp=50eba48bc2a4ad4c&bpcl=39580677&biw=1920&bih=1106

[sudovenko]

With all due respect, please read the question: " embedded version of HQ (no config files)" ...

I've seen what you posted prior to posting the question... That does not address my question.

[jbertram]

If you invoke org.hornetq.core.config.Configuration#setClusterPassword with something other than "CHANGE ME!!" does that not eliminate the WARN?

[sudovenko]

Is there any way to do it through the API?

[jbertram]

I assume you are creating a org.hornetq.core.server.embedded.EmbeddedHornetQ and subsequently invoking org.hornetq.core.server.embedded.EmbeddedHornetQ#setConfiguration.  Is that correct?  If so, then you can invoke org.hornetq.core.config.Configuration#setClusterPassword on the org.hornetq.core.config.Configuration which you pass.

[clebert.suconic]

That's the same thing... the cluster-password on the XML is translated as the property clusterPassword on the class Configuration

just call configuration.setClusterPassword before you start the server.

[clebert.suconic]

I'm sorry on that case. We get some weird questions from time to time and I thought you didn't even look at the sources before posting it.

Your question is more how the configuration is translated into the API. ConfigurationImpl (or configuration) has always (or almost aways) a contrapart on the XML. Translating stuff between XML and Configuration should be a simple matter. Take a look on that.

[sudovenko]

Thank you champs!

Got it sorted out with your help.

Just as a note, it would beneficial to see Configuration class in the API.

Thanks to all of you!

[clebert.suconic]

I'm not sure what happened but I had post a complete example for you, and it got lost...

But I'm glad you figured out

the example I posted (but for some reason didn't commit on my add-reply, maybe I missed something.. dunno) was based on the embedded example...

Good you figured out