-Djolokia.disabledServices=org.jolokia.service.history.HistoryMBeanRequestInterceptor

On Wed, 27 Aug 2025 at 10:19, Andy Taylor <andy.tayl...@gmail.com> wrote:

> You can also allow access to those HawtIO Mbeans in management.xml or if
> you are just dropping the war into Artemis then add the
> prop 
> disabledServices=org.jolokia.service.history.HistoryMBeanRequestInterceptor.
>
> On Wed, 27 Aug 2025 at 09:31, Andy Taylor <andy.tayl...@gmail.com> wrote:
>
>> @Justin Bertram <jbert...@redhat.com> Yes I have seen that, Jolokia has
>> an auditfacility. We remove these jars when deployed in an Artemis build,
>> how are you deploying?
>>
>> just fyi this hasnt changed
>>
>> Andy
>>
>> On Tue, 26 Aug 2025 at 21:43, Justin Bertram <jbert...@apache.org> wrote:
>>
>>> When I deploy the console WAR file to an instance of ActiveMQ Artemis
>>> 2.42.0 I see a lot of exceptions like this in the log when I log in to
>>> the
>>> web console with my browser:
>>>
>>>     WARN  [org.eclipse.jetty.ee9.nested.ContextHandler._console]
>>> jolokia-agent: Cannot call request logger
>>> org.jolokia.service.history.HistoryMBeanRequestInterceptor@7800cf67:
>>> java.lang.SecurityException: User not authorized to access operation:
>>> updateAndAdd
>>> java.lang.SecurityException: User not authorized to access operation:
>>> updateAndAdd
>>>         at
>>>
>>> org.apache.activemq.artemis.core.server.management.ArtemisMBeanServerGuard.handleInvoke(ArtemisMBeanServerGuard.java:168)
>>>         at
>>>
>>> org.apache.activemq.artemis.core.server.management.ArtemisMBeanServerGuard.invoke(ArtemisMBeanServerGuard.java:69)
>>>         at
>>>
>>> org.apache.activemq.artemis.core.server.management.ArtemisMBeanServerBuilder$MBeanInvocationHandler.invoke(ArtemisMBeanServerBuilder.java:76)
>>>         at jdk.proxy2/jdk.proxy2.$Proxy33.invoke(Unknown Source)
>>>         at
>>>
>>> org.jolokia.service.history.HistoryMBeanRequestInterceptor$1.run(HistoryMBeanRequestInterceptor.java:72)
>>>         at
>>>
>>> java.base/java.security.AccessController.doPrivileged(AccessController.java:712)
>>>         at java.base/javax.security.auth.Subject.doAs(Subject.java:439)
>>>         at
>>>
>>> org.jolokia.service.history.HistoryMBeanRequestInterceptor.intercept(HistoryMBeanRequestInterceptor.java:68)
>>>         at
>>>
>>> org.jolokia.server.core.backend.BackendManager.intercept(BackendManager.java:131)
>>>         at
>>>
>>> org.jolokia.server.core.backend.BackendManager.handleRequest(BackendManager.java:116)
>>>         at
>>>
>>> org.jolokia.server.core.http.HttpRequestHandler.executeRequest(HttpRequestHandler.java:205)
>>>         at
>>>
>>> org.jolokia.server.core.http.HttpRequestHandler.handlePostRequest(HttpRequestHandler.java:139)
>>>         at
>>>
>>> org.jolokia.server.core.http.AgentServlet$1.handleRequest(AgentServlet.java:496)
>>>         at
>>>
>>> org.jolokia.server.core.http.AgentServlet.handleSecurely(AgentServlet.java:378)
>>>         at
>>> org.jolokia.server.core.http.AgentServlet.handle(AgentServlet.java:316)
>>>         at
>>> org.jolokia.server.core.http.AgentServlet.doPost(AgentServlet.java:275)
>>>         at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:520)
>>>         at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:587)
>>>         ...
>>>
>>> Have you seen this before?
>>>
>>> Is there perhaps a new Jolokia operation (i.e. updateAndAdd) that's not
>>> accounted for in the default management.xml?
>>>
>>>
>>> Justin
>>>
>>> On Tue, Aug 26, 2025 at 9:23 AM Clebert Suconic <
>>> clebert.suco...@gmail.com>
>>> wrote:
>>>
>>> > +1 Binding
>>> >
>>> > On Tue, Aug 26, 2025 at 5:58 AM Andy Taylor <andy.tayl...@gmail.com>
>>> > wrote:
>>> > >
>>> > > I would like to propose an ActiveMQ Artemis Console 1.3.0 release.
>>> The
>>> > main
>>> > > focus of this release is a HawtIO Upgrade, some repackaging of the
>>> NPM
>>> > > components and fixes.
>>> > >
>>> > > The Binary artifacts can be found at
>>> > >
>>> >
>>> https://dist.apache.org/repos/dist/dev/activemq/activemq-artemis-console/1.3.0
>>> > >
>>> > > The Maven staging repository is here:
>>> > >
>>> >
>>> https://repository.apache.org/content/repositories/orgapacheactivemq-1435
>>> > >
>>> > > If you would like to validate the release you can either:
>>> > >
>>> > > 1. Check out the source, build and follow the readme instructions
>>> > > (README.md) to deploy and smoke test the console.
>>> > > 2. Download the binary distribution and deploy in a web container.
>>> > > 3. Replace the console war in the latest ActiveMQ Artemis release or
>>> a
>>> > > build from source.
>>> > >
>>> > > [ ] +1 approve this release [ ] +0 no opinion [ ] -1 disapprove (and
>>> > reason
>>> > > why)
>>> > >
>>> > > Here's my +1
>>> > >
>>> > > Andy Taylor
>>> >
>>> >
>>> >
>>> > --
>>> > Clebert Suconic
>>> >
>>> > ---------------------------------------------------------------------
>>> > To unsubscribe, e-mail: dev-unsubscr...@activemq.apache.org
>>> > For additional commands, e-mail: dev-h...@activemq.apache.org
>>> > For further information, visit: https://activemq.apache.org/contact
>>> >
>>> >
>>> >
>>>
>>

Reply via email to