Gary Tully created ARTEMIS-5051:
-----------------------------------
Summary: console jolokia default detector config makes
unauthenticated mbean requests that are denied by ArtemisRbacMBeanServerBuilder
Key: ARTEMIS-5051
URL: https://issues.apache.org/jira/browse/ARTEMIS-5051
Project: ActiveMQ Artemis
Issue Type: Bug
Components: Web Console
Affects Versions: 2.37.0
Reporter: Gary Tully
Assignee: Gary Tully
Fix For: 2.38.0
The resulting errors are not consequential but very ugly.
broker with: java ... -Dhawtio.role=*
-Djavax.management.builder.initial=org.apache.activemq.artemis.core.server.management.ArtemisRbacMBeanServerBuilder
errors of the form:
bq. AMQ601716: User anonymous@internal failed authentication on connection
management, reason: AMQ229031: Unable to validate user from management.
Username: null; SSL certificate subject DN: unavailable
bq. jolokia-agent: Error while using detector GeronimoDetector:
java.lang.SecurityException: AMQ229031: Unable to validate user from
management. Username: null; SSL certificate subject DN: unavailable
bq. java.lang.SecurityException: AMQ229031: Unable to validate user from
management. Username: null; SSL certificate subject DN: unavailable
bq. at
org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.securityCheck(ArtemisRbacInvocationHandler.java:207)
bq. at
org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.invoke(ArtemisRbacInvocationHandler.java:71)
bq. at jdk.proxy2/jdk.proxy2.$Proxy29.queryNames(Unknown Source) ~[?:?]
bq. at
org.jolokia.backend.executor.AbstractMBeanServerExecutor.queryNames(AbstractMBeanServerExecutor.java:113)
bq. at
org.jolokia.detector.AbstractServerDetector.searchMBeans(AbstractServerDetector.java:46)
bq. at
org.jolokia.detector.AbstractServerDetector.getSingleStringAttribute(AbstractServerDetector.java:124)
bq. at org.jolokia.detector.GeronimoDetector.detect(GeronimoDetector.java:32)
bq.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
