By default, the AdminServer, whether running locally or remotely, uses Operating System (OS) authentication for establishing its connection with OpenEdge Management. To improve performance, authenticated OS credentials are cached for a configurable duration, reducing repeated authentication requests for the same user. You can configure the cache duration, depending on your OpenEdge release.
Note: If you are using OpenEdge release 12.8.11 or earlier, update the Ehcache properties in the activemqsCache.xml file. If you are using release 12.8.12 or later, update the cacheMemoryCacheFactory.ttlSeconds property in the activemqs.ini file instead.

As an alternative to OS-based authentication, you can configure INI authentication by using either the default credentials or custom credentials defined in the activemqsRealm.properties file. The INI authentication lets you control who can access the AdminServer without depending on OS user accounts.

The procedure to configure INI authentication depends on whether you use the default or custom credentials. Choose the appropriate procedure below for configuring INI authentication.
Note: The activemqsRealm.properties file no longer supports plain‑text passwords. Irrespective of whether you use default or custom credentials for INI authentication, you must generate a Shiro‑encrypted password using the shiro-hasher utility and place it in the file.

Modify the cache duration for Operating System-based authentication

By default, the AdminServer caches Operating System (OS) authentication credentials for 600 seconds (10 minutes). This caching improves performance by reducing repeated authentication requests for the same user. You can modify the cache duration by updating the cacheMemoryCacheFactory.ttlSeconds property in the activemqs.ini file.

To modify the cache duration for OS-based authentication, perform the following steps:
  1. Stop the AdminServer. For details, see Stop the AdminServer.
  2. Open the activemqs.ini file.
    • On Windows, go to %DLC%\properties\activemqs.ini
    • On Linux, go to $DLC/properties/activemqs.ini
  3. Locate the cacheMemoryCacheFactory.ttlSeconds property.
    cacheMemoryCacheFactory.ttlSeconds=600
  4. Set the property value as required. This value determines how long, in seconds, the authenticated OS credentials remain in the cache before they expire.
    Value Description
    0 Specifies that the cached credentials never expire.
    600 (default) Specifies that the cached credentials expire after 10 minutes.
    Any other positive integer Specifies that the cached credentials expire after the specified number of seconds.
    Note:
    • If you set the property to a negative value, or remove the property from the file, the value is reset to the default value of 600.
    • If you set the property to an invalid value (for example, a non-numeric or alphanumeric), the value is reset to 0.
  5. Save the file.
  6. Restart the AdminServer. For details, see Start the AdminServer.

Configure INI authentication using default or custom credentials

To configure INI authentication for communication between AdminServer and OpenEdge Management using either default or custom credentials, complete the following steps:
  1. Stop the AdminServer. For details, see Stop the AdminServer.
  2. Generate an encrypted version of your plain-text password using the shiro-hasher utility and place the encrypted password in the activemqsRealm.properties file. For details, see Generate and apply Shiro-encrypted password for INI authentication.
  3. Change OS authentication to INI authentication in the activemqs.ini file. For details, see Enable INI authentication for the AdminServer.
  4. Start the AdminServer. For details, see Start the AdminServer.
  5. Add or update AdminServer credentials in OpenEdge Management. For details, see Add or update the AdminServer credentials in OpenEdge Management.