[
https://issues.apache.org/jira/browse/ARTEMIS-5051?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17882785#comment-17882785
]
Gary Tully commented on ARTEMIS-5051:
-------------------------------------
There is an upstream jolokia issue targeted for jolokia 2.0.1 that makes this
behaviour configurable - [https://github.com/jolokia/jolokia/issues/698] but
that does not help for the current console.
if we provide our own detectors config that disabled all of the defaults, we
can avoid the problem by adding it to the console war.
> console jolokia default detector config makes unauthenticated mbean requests
> that are denied by ArtemisRbacMBeanServerBuilder
> -----------------------------------------------------------------------------------------------------------------------------
>
> Key: ARTEMIS-5051
> URL: https://issues.apache.org/jira/browse/ARTEMIS-5051
> Project: ActiveMQ Artemis
> Issue Type: Bug
> Components: Web Console
> Affects Versions: 2.37.0
> Reporter: Gary Tully
> Assignee: Gary Tully
> Priority: Major
> Fix For: 2.38.0
>
>
> The resulting errors are not consequential but very ugly.
> broker with: java ... -Dhawtio.role=*
> -Djavax.management.builder.initial=org.apache.activemq.artemis.core.server.management.ArtemisRbacMBeanServerBuilder
> errors of the form:
> bq. AMQ601716: User anonymous@internal failed authentication on connection
> management, reason: AMQ229031: Unable to validate user from management.
> Username: null; SSL certificate subject DN: unavailable
> bq. jolokia-agent: Error while using detector GeronimoDetector:
> java.lang.SecurityException: AMQ229031: Unable to validate user from
> management. Username: null; SSL certificate subject DN: unavailable
> bq. java.lang.SecurityException: AMQ229031: Unable to validate user from
> management. Username: null; SSL certificate subject DN: unavailable
> bq. at
> org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.securityCheck(ArtemisRbacInvocationHandler.java:207)
>
> bq. at
> org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.invoke(ArtemisRbacInvocationHandler.java:71)
>
> bq. at jdk.proxy2/jdk.proxy2.$Proxy29.queryNames(Unknown Source) ~[?:?]
> bq. at
> org.jolokia.backend.executor.AbstractMBeanServerExecutor.queryNames(AbstractMBeanServerExecutor.java:113)
>
> bq. at
> org.jolokia.detector.AbstractServerDetector.searchMBeans(AbstractServerDetector.java:46)
>
> bq. at
> org.jolokia.detector.AbstractServerDetector.getSingleStringAttribute(AbstractServerDetector.java:124)
>
> bq. at org.jolokia.detector.GeronimoDetector.detect(GeronimoDetector.java:32)
> bq.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact
