67 lines
3.6 KiB
XML
67 lines
3.6 KiB
XML
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
|
|
xml:id="basics-queue">
|
|
<?dbhtml-stop-chunking?>
|
|
<title>Messaging server</title>
|
|
<para>On the controller node, install the messaging queue server.
|
|
Typically this is <phrase os="ubuntu;debian;opensuse;sles"
|
|
><glossterm>RabbitMQ</glossterm></phrase>
|
|
<phrase os="centos;rhel;fedora">
|
|
<glossterm>Qpid</glossterm></phrase> but
|
|
<phrase os="ubuntu;debian;opensuse;sles"><glossterm>Qpid</glossterm></phrase>
|
|
<phrase os="centos;rhel;fedora"><glossterm>RabbitMQ</glossterm></phrase>
|
|
and <glossterm>ZeroMQ</glossterm> (0MQ) are also available:</para>
|
|
<screen os="ubuntu;debian"><prompt>#</prompt> <userinput>apt-get install rabbitmq-server</userinput></screen>
|
|
<screen os="opensuse;sles"><prompt>#</prompt> <userinput>zypper install rabbitmq-server</userinput></screen>
|
|
<screen os="fedora;centos;rhel"><prompt>#</prompt> <userinput>yum install qpid-cpp-server</userinput></screen>
|
|
<para os="fedora;centos;rhel">Disable Qpid authentication by
|
|
editing <filename>/etc/qpidd.conf</filename> file and changing
|
|
the <literal>auth</literal> option to
|
|
<literal>no</literal>:</para>
|
|
<screen os="fedora;centos;rhel"> <userinput>auth=no</userinput></screen>
|
|
<note os="fedora;centos;rhel">
|
|
<para>
|
|
To simplify configuration, the Qpid examples in this guide do not use
|
|
authentication. However, we strongly advise enabling authentication
|
|
for production deployments. For more information on securing Qpid
|
|
refer to the
|
|
<link xlink:href=
|
|
"http://qpid.apache.org/books/trunk/AMQP-Messaging-Broker-CPP-Book/html/chap-Messaging_User_Guide-Security.html"
|
|
>Qpid Documentation</link>.
|
|
</para>
|
|
<para>
|
|
After you enable Qpid authentication, you must update the configuration
|
|
file of each OpenStack service to ensure that the
|
|
<literal>qpid_username</literal> and <literal>qpid_password</literal>
|
|
configuration keys refer to a valid Qpid username and password,
|
|
respectively.
|
|
</para>
|
|
</note>
|
|
<para os="fedora;centos;rhel">Start Qpid and set it to start
|
|
automatically when the system boots:</para>
|
|
<screen os="fedora;centos;rhel"><prompt>#</prompt> <userinput>service qpidd start</userinput>
|
|
<prompt>#</prompt> <userinput>chkconfig qpidd on</userinput></screen>
|
|
<para os="opensuse;sles">Start the messaging service and set it to
|
|
start automatically when the system boots:</para>
|
|
<screen os="opensuse;sles"><prompt>#</prompt> <userinput>service rabbitmq-server start</userinput>
|
|
<prompt>#</prompt> <userinput>chkconfig rabbitmq-server on</userinput></screen>
|
|
<note os="ubuntu;debian;opensuse;sles">
|
|
<title>Important security consideration</title>
|
|
<para>The <package>rabbitmq-server</package> package configures
|
|
the RabbitMQ service to start automatically and creates a
|
|
<literal>guest</literal> user with a default
|
|
<literal>guest</literal> password. The RabbitMQ examples in
|
|
this guide use the <literal>guest</literal> account, though it
|
|
is strongly advised to change its default password, especially
|
|
if you have IPv6 available: by default the RabbitMQ server
|
|
enables anyone to connect to it by using guest as login and
|
|
password, and with IPv6, it is reachable from the
|
|
outside.</para>
|
|
<para>To change the default guest password of RabbitMQ:</para>
|
|
<screen><prompt>#</prompt> <userinput>rabbitmqctl change_password guest <replaceable>RABBIT_PASS</replaceable></userinput></screen>
|
|
</note>
|
|
<para>Congratulations, now you are ready to install OpenStack
|
|
services!</para>
|
|
</section>
|