剛剛安裝的RabbitMQ-Server-3.3.5,並且也已經開啟了Web管理功能,但是現在存在一個問題:
出於安全的考慮,guest這個默認的用戶只能通過http://localhost:15672 來登錄,不能使用IP地址登錄,也就是不能遠程訪問,這對於服務器上沒有安裝桌面的情況是無法管理維護的。
要解決這個問題需要配置遠程登錄權限,這里通過配置文件來實現遠程訪問。
這里主要介紹Unix和Windows的配置文件修改。
一、Windows
Windows環境下默認配置文件為目錄/%RabbitMQ Server%/rabbitmq_server-3.3.5/etc下的rabbitmq.config.example文件,我們可以直接在這個文件中修改(可以不用去設置環境變量了),也可以自己再新建一個rabbitmq.config文件,然后把這個文件路徑配置到環境變量中,這里介紹就直接修改rabbitmq.config.example文件。
注意:修改之前,需要先停止RabbitMQ服務!!不然是不能保存的!!!
配置之前需要先添加用戶,用於外網的訪問,可以使用命令行來實現添加用戶,需要在RabbitMQ的安裝目錄sbin目錄下執行:
1
|
duanwf@master:
/opt/rabbitmq_server-3
.3.5
/sbin
$ rabbitmqctl add_user admin admin
|
也可以通過web管理頁面來添加用戶和密碼,使用guest登錄web管理頁面http://localhost:15672,進入“admin”標簽頁,然后點擊“Add a user ”,輸入對用的帳號密碼,然后選擇用戶角色(一定要選擇):
為了授權該用戶對VirtualHost"/" 的訪問,用戶添加之后,需要對該用戶進行授權,不然運行會出現錯誤:
1
|
Caused by: com.rabbitmq.client.ShutdownSignalException: channel error; reason: {
#method<channel.close>(reply-code=403, reply-text=ACCESS_REFUSED - access to queue 'hello' in vhost '/' refused for user 'admin', class-id=50, method-id=10), null, ""}
|
詳細錯誤日志為:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
java.io.IOException
at com.rabbitmq.client.impl.AMQChannel.wrap(AMQChannel.java:106)
at com.rabbitmq.client.impl.AMQChannel.wrap(AMQChannel.java:102)
at com.rabbitmq.client.impl.AMQChannel.exnWrappingRpc(AMQChannel.java:124)
at com.rabbitmq.client.impl.ChannelN.queueDeclare(ChannelN.java:766)
at com.rabbitmq.client.impl.ChannelN.queueDeclare(ChannelN.java:61)
at com.asiainfo.mq.rabbitmq.rabbitmqtest.SendTest.main(SendTest.java:29)
Caused by: com.rabbitmq.client.ShutdownSignalException: channel error; reason: {
#method<channel.close>(reply-code=403, reply-text=ACCESS_REFUSED - access to queue 'hello' in vhost '/' refused for user 'admin', class-id=50, method-id=10), null, ""}
at com.rabbitmq.utility.ValueOrException.getValue(ValueOrException.java:67)
at com.rabbitmq.utility.BlockingValueOrException.uninterruptibleGetValue(BlockingValueOrException.java:33)
at com.rabbitmq.client.impl.AMQChannel$BlockingRpcContinuation.getReply(AMQChannel.java:343)
at com.rabbitmq.client.impl.AMQChannel.privateRpc(AMQChannel.java:216)
at com.rabbitmq.client.impl.AMQChannel.exnWrappingRpc(AMQChannel.java:118)
... 3
more
Caused by: com.rabbitmq.client.ShutdownSignalException: channel error; reason: {
#method<channel.close>(reply-code=403, reply-text=ACCESS_REFUSED - access to queue 'hello' in vhost '/' refused for user 'admin', class-id=50, method-id=10), null, ""}
at com.rabbitmq.client.impl.ChannelN.asyncShutdown(ChannelN.java:473)
at com.rabbitmq.client.impl.ChannelN.processAsync(ChannelN.java:313)
at com.rabbitmq.client.impl.AMQChannel.handleCompleteInboundCommand(AMQChannel.java:144)
at com.rabbitmq.client.impl.AMQChannel.handleFrame(AMQChannel.java:91)
at com.rabbitmq.client.impl.AMQConnection$MainLoop.run(AMQConnection.java:533)
|
操作過程為:在Admin標簽頁下點擊新增的用戶"admin",進入授權頁面,默認直接點擊"set permission"即可:
用戶以及授權添加完成之后,在rabbitmq.config.example文件中,添加以下內容,保存后重啟RabbitMQ服務:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
|
……
[
{rabbit,
[%%
%% Network Connectivity
%% ====================
%%
%% By default, RabbitMQ will listen on all interfaces, using
%% the standard (reserved) AMQP port.
%%
{tcp_listeners, [5672]},
{loopback_users, [
"admin"
]},
……
]}
].
|
在瀏覽器中輸入http://192.168.0.124:15672實現通過IP地址訪問,成功登錄:
測試用例見博文“RabbitMQ遠程調用測試用例”
二、Unix
unix環境下,配置文件在%/rabbitmq_server-3.3.5%/etc/rabbitmq/rabbitmq.config.example
1
|
root@master:
/opt/rabbitmq_server-3
.3.5
/etc/rabbitmq
# vi rabbitmq.config.example
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
|
%% -*- mode: erlang -*-
%% ----------------------------------------------------------------------------
%% RabbitMQ Sample Configuration File.
%%
%% See http:
//www
.rabbitmq.com
/configure
.html
for
details.
%% ----------------------------------------------------------------------------
[
{rabbit,
[%%
%% Network Connectivity
%% ====================
%%
%% By default, RabbitMQ will listen on all interfaces, using
%% the standard (reserved) AMQP port.
%%
{tcp_listeners, [5672]},
{loopback_users, [
"admin"
]},
……
]}
].
|
參考地址:
http://blog.haohtml.com/archives/15249