2.6. Adding Users

Usernames, passwords, and roles are added to properties files.
Usernames and passwords are defined as follows:
username=password
Roles are defined as follows:
username=JBossAdmin,httpInvoker,user,admin
JBoss Enterprise Application Platform and JBoss Enterprise SOA Platform use the brms-users.properties file for usernames and passwords and brms-roles.properties to define roles.
Jboss Enterprise Web Server uses the users.properties file for usernames and passwords and roles.properties to define roles. JBoss Enterprise Web Server users must also add the username, passwords, and roles to the tomcat6/conf/tomcat-users.xml file:
<role rolename="manager-gui"/>
<role rolename="manager-script"/>
<role rolename="manager-jmx"/>


<role rolename="user"/>

<user username="admin" password="admin" roles="manager-gui,manager-script,manager-jmx,user"/>

Note

Users who are given permission to access the business central console must have one of the following roles: administrator, manager, or user.
Create the properties files in the following directory or on the classpath:
  • JBoss Enterprise Application Platform 5.x:
    jboss-as/server/profile/conf/props/
  • JBoss Enterprise SOA Platform:
    jboss-esb/server/profile/conf/props/
  • JBoss Enterprise Web Server 1:
    tomcat6/lib/
  • JBoss Enterprise Web Server 2
    tomcat7/lib/
  • JBoss Enterprise Application Platform 6:
    jboss-eap-6.0/standalone/configuration/
JBoss Enterprise Application Platform 6 users must update the security domain to include references to brms-users.properties and brms-roles.properties by editing the jboss-eap-6.0/standalone/configuration/standalone.xml by adding the following XML:
<security-domain name="brms" cache-type="default">
   <authentication>
      <login-module code="UsersRoles" flag="required">
         <module-option name="usersProperties" value="${jboss.server.config.dir}/brms-users.properties"/>
         <module-option name="rolesProperties" value="${jboss.server.config.dir}/brms-roles.properties"/>
      </login-module>
   </authentication>
</security-domain>