hornetq cluster-user and cluster-password in jboss 7.1.1

[lzcmail]

1. What are the hornetq cluster-user and cluster-password for?

2. How to encrypt the cluster-password?

Here is an exmple of  standalone-full-ha.xml:

<subsystem xmlns="urn:jboss:domain:messaging:1.1">

            <hornetq-server>

              <clustered>true</clustered>

              <cluster-user>admin</cluster-user>

              <cluster-password>password</cluster-password>

                <persistence-enabled>true</persistence-enabled>

                <journal-file-size>102400</journal-file-size>

                <journal-min-files>2</journal-min-files>

Thanks in advance.

[jbertram]

The <cluster-user> and <cluster-password> credentials are used to make connections between cluster nodes.  These connections are used to move messages from one node to another for load-balancing purposes.  However, they can technically be used by any remote client to connect to the server which is why you should change them from the default.  In AS7 if you don't change the default cluster-password then a random UUID is used automatically to prevent any attacks out of the box.

I believe you can encrypt the password using the standard vault mechanism described here.

[lzcmail]

Thanks Justin.

[bvnghiem1012]

Hi Justin,

Can we apply security domain for cluster-user and cluster-password. I want to use a user from DB for this. Is it applicable?

If yes, how can I get this work? An example of configuration would be nice.

Thank a lot,

Nghiem

[jbertram]

No, you can't "apply security domain for cluster-user and cluster-password."