[
https://issues.apache.org/jira/browse/ARTEMIS-5051?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18052180#comment-18052180
]
ASF subversion and git services commented on ARTEMIS-5051:
----------------------------------------------------------
Commit 5e059318332e950d1783f6f943dc0a39b05b0089 in artemis's branch
refs/heads/main from Domenico Francesco Bruscino
[ https://gitbox.apache.org/repos/asf?p=artemis.git;h=5e05931833 ]
ARTEMIS-5849 Disable jolokia detectors in console war
This commit fixes a regression of ARTEMIS-5051 caused by ARTEMIS-5835.
> console jolokia default detector config makes unauthenticated mbean requests
> that are denied by ArtemisRbacMBeanServerBuilder
> -----------------------------------------------------------------------------------------------------------------------------
>
> Key: ARTEMIS-5051
> URL: https://issues.apache.org/jira/browse/ARTEMIS-5051
> Project: Artemis
> Issue Type: Bug
> Components: Web Console
> Affects Versions: 2.37.0
> Reporter: Gary Tully
> Assignee: Gary Tully
> Priority: Major
> Fix For: 2.38.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The resulting errors are not consequential but very ugly.
> {noformat}
> broker with: java ... -Dhawtio.role=*
> -Djavax.management.builder.initial=org.apache.activemq.artemis.core.server.management.ArtemisRbacMBeanServerBuilder{noformat}
> errors of the form:
> {noformat}
> AMQ601716: User anonymous@internal failed authentication on connection
> management, reason: AMQ229031: Unable to validate user from management.
> Username: null; SSL certificate subject DN: unavailable
> jolokia-agent: Error while using detector GeronimoDetector:
> java.lang.SecurityException: AMQ229031: Unable to validate user from
> management. Username: null; SSL certificate subject DN: unavailable
> java.lang.SecurityException: AMQ229031: Unable to validate user from
> management. Username: null; SSL certificate subject DN: unavailable
> at
> org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.securityCheck(ArtemisRbacInvocationHandler.java:207)
> at
> org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.invoke(ArtemisRbacInvocationHandler.java:71)
> at jdk.proxy2/jdk.proxy2.$Proxy29.queryNames
> at
> org.jolokia.backend.executor.AbstractMBeanServerExecutor.queryNames(AbstractMBeanServerExecutor.java:113)
> at
> org.jolokia.detector.AbstractServerDetector.searchMBeans(AbstractServerDetector.java:46)
> at
> org.jolokia.detector.AbstractServerDetector.getSingleStringAttribute(AbstractServerDetector.java:124)
> at
> org.jolokia.detector.GeronimoDetector.detect(GeronimoDetector.java:32){noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
