1.管理后台密码

(1)ActiveMQ使用的是jetty服务器打开apache-activemq-5.8.0\conf\jetty.xml
找到

   <pre name="code" class="html"> <bean id="securityConstraint" class="org.eclipse.jetty.util.security.Constraint">
        <property name="name" value="BASIC" />
        <property name="roles" value="admin" />
        <property name="authenticate" value="true" />
  </bean>

低版本的authenticate的属性默认为"false" 需要改为"true"，高版本的已经默认为true

(2)修改控制台的登录用户名密码conf/jetty-realm.properties文件中

## ---------------------------------------------------------------------------
## Licensed to the Apache Software Foundation (ASF) under one or more
## contributor license agreements.  See the NOTICE file distributed with
## this work for additional information regarding copyright ownership.
## The ASF licenses this file to You under the Apache License, Version 2.0
## (the "License"); you may not use this file except in compliance with
## the License.  You may obtain a copy of the License at
##
## http://www.apache.org/licenses/LICENSE-2.0
##
## Unless required by applicable law or agreed to in writing, software
## distributed under the License is distributed on an "AS IS" BASIS,
## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
## See the License for the specific language governing permissions and
## limitations under the License.
## ---------------------------------------------------------------------------
# Defines users that can access the web (console, demo, etc.)
# username: password [,rolename ...]
#admin: admin, admin
#user: user, user
#用户名 :密码:角色名
lwp: lwp123, admin

2.消息消费者密码认证

(1)修改activemq.xml配置,需要新增一个插件,在<broker>节点里面<systemUsage>节点前面添加如下

<plugins>
         	<simpleAuthenticationPlugin>
         		<users>
         			<authenticationUser username="${activemq.username}" password="${activemq.password}" groups="users,admins"/>
         		</users>
         	</simpleAuthenticationPlugin>
         </plugins>

(2)用户名密码文件为:credentials.properties

## ---------------------------------------------------------------------------
## Licensed to the Apache Software Foundation (ASF) under one or more
## contributor license agreements.  See the NOTICE file distributed with
## this work for additional information regarding copyright ownership.
## The ASF licenses this file to You under the Apache License, Version 2.0
## (the "License"); you may not use this file except in compliance with
## the License.  You may obtain a copy of the License at
##
## http://www.apache.org/licenses/LICENSE-2.0
##
## Unless required by applicable law or agreed to in writing, software
## distributed under the License is distributed on an "AS IS" BASIS,
## WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
## See the License for the specific language governing permissions and
## limitations under the License.
## ---------------------------------------------------------------------------

# Defines credentials that will be used by components (like web console) to access the broker

activemq.username=system
activemq.password=manager
guest.password=password

然后在java client 处就需要设置密码才能连接

ConnectionFactory connectionFactory = new ActiveMQConnectionFactory("system",  "manager", "tcp://localhost:61616"); 

看到一篇 ActiveMQ的安全机制使用及其源代码分析感觉不错,地址如下

http://www.uml.org.cn/j2ee/201305033.asp