Hi The connection factory doesn't use jaas, it directly use username/password provided in cf configuration.
Do you use mutual authentication on amq side ? I just tried without problem locally. I will try with same version as yours. Regards JB Le 12 févr. 2019 à 22:23, à 22:23, Xavier Medina <[email protected]> a écrit: >Hi, > > We are using Karaf 3.0.4 , openjdk u8, ActiveMQ 5.11 as standalone on >AWS via ssl://aaaaa.amazonaws:61617. > >Provide broker, userName and Pasword via features.xml > > <!-- Configure ActiveMQ Connection Factories --> > <bean id="amqConnectionFactory" >class="org.apache.activemq.ActiveMQConnectionFactory"> > <property name="brokerURL" value="$(jms.url)" /> > <property name="userName" value="$(jms.username)" /> > <property name="password" value="$(jms.passwword)" /> > <property name="alwaysSessionAsync" value="true" /> > <property name="dispatchAsync" value="false" /> > <property name="useAsyncSend" value="false" /> > </bean> > >However when we start the bundle we are getting the following issues: > > ... 15 more >20:36:24,219 | ERROR | [xxxCreateQueue] | >.DefaultMessageListenerContainer >904 | 164 - org.apache.servicemix.bundles.spring-jms - 3.2.11.RELEASE_1 >| >Could not refresh JMS Connection for destination 'xxxKaCreateQueue' - >retrying in 5000 ms. Cause: User name [mquser] or password is invalid. >javax.jms.JMSSecurityException: User name [mquser] or password is >invalid. > at >org.apache.activemq.util.JMSExceptionSupport.create(JMSExceptionSupport.java:52)[115:org.apache.activemq.activemq-osgi:5.11.1] > at >org.apache.activemq.ActiveMQConnection.syncSendPacket(ActiveMQConnection.java:1420)[115:org.apache.activemq.activemq-osgi:5.11.1] > at >org.apache.activemq.ActiveMQConnection.ensureConnectionInfoSent(ActiveMQConnection.java:1521)[115:org.apache.activemq.activemq-osgi:5.11.1] > at >org.apache.activemq.ActiveMQConnection.start(ActiveMQConnection.java:528)[115:org.apache.activemq.activemq-osgi:5.11.1] > at >org.springframework.jms.listener.AbstractJmsListeningContainer.refreshSharedConnection(AbstractJmsListeningContainer.java:392)[164:org.apache.servicemix.bundles.spring-jms:3.2.11.RELEASE_1] > at >org.springframework.jms.listener.DefaultMessageListenerContainer.refreshConnectionUntilSuccessful(DefaultMessageListenerContainer.java:885)[164:org.apache.servicemix.bundles.spring-jms:3.2.11.RELEASE_1] > at >org.springframework.jms.listener.DefaultMessageListenerContainer.recoverAfterListenerSetupFailure(DefaultMessageListenerContainer.java:861)[164:org.apache.servicemix.bundles.spring-jms:3.2.11.RELEASE_1] > at >org.springframework.jms.listener.DefaultMessageListenerContainer$AsyncMessageListenerInvoker.run(DefaultMessageListenerContainer.java:1012)[164:org.apache.servicemix.bundles.spring-jms:3.2.11.RELEASE_1] > at >java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)[:1.8.0_191] > at >java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)[:1.8.0_191] > at java.lang.Thread.run(Thread.java:748)[:1.8.0_191] >Caused by: java.lang.SecurityException: User name [mquser] or password >is >invalid. > at >org.apache.activemq.security.JaasAuthenticationBroker.authenticate(JaasAuthenticationBroker.java:97) > at >org.apache.activemq.security.JaasAuthenticationBroker.addConnection(JaasAuthenticationBroker.java:68) > at >org.apache.activemq.broker.BrokerFilter.addConnection(BrokerFilter.java:99) > at >org.apache.activemq.broker.TransportConnection.processAddConnection(TransportConnection.java:843) > at >org.apache.activemq.broker.jmx.ManagedTransportConnection.processAddConnection(ManagedTransportConnection.java:77) > at >org.apache.activemq.command.ConnectionInfo.visit(ConnectionInfo.java:139)[115:org.apache.activemq.activemq-osgi:5.11.1] > at >org.apache.activemq.broker.TransportConnection.service(TransportConnection.java:330) > at >org.apache.activemq.broker.TransportConnection$1.onCommand(TransportConnection.java:194) > at >org.apache.activemq.transport.MutexTransport.onCommand(MutexTransport.java:50) > at >org.apache.activemq.transport.WireFormatNegotiator.onCommand(WireFormatNegotiator.java:125) > at >org.apache.activemq.transport.AbstractInactivityMonitor.onCommand(AbstractInactivityMonitor.java:301) > at >org.apache.activemq.transport.TransportSupport.doConsume(TransportSupport.java:83) > at >org.apache.activemq.transport.tcp.SslTransport.doConsume(SslTransport.java:145) > at >org.apache.activemq.transport.tcp.TcpTransport.doRun(TcpTransport.java:233)[115:org.apache.activemq.activemq-osgi:5.11.1] > at >org.apache.activemq.transport.tcp.TcpTransport.run(TcpTransport.java:215)[115:org.apache.activemq.activemq-osgi:5.11.1] > ... 1 more >Caused by: javax.security.auth.login.FailedLoginException: Password >does >not match > at >org.apache.activemq.jaas.PropertiesLoginModule.login(PropertiesLoginModule.java:92) > at sun.reflect.GeneratedMethodAccessor170.invoke(Unknown Source) > at >sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)[:1.8.0_191] > at java.lang.reflect.Method.invoke(Method.java:498)[:1.8.0_191] > at >javax.security.auth.login.LoginContext.invoke(LoginContext.java:755) > at >javax.security.auth.login.LoginContext.access$000(LoginContext.java:195) > at >javax.security.auth.login.LoginContext$4.run(LoginContext.java:682) > at >javax.security.auth.login.LoginContext$4.run(LoginContext.java:680) > at java.security.AccessController.doPrivileged(Native >Method)[:1.8.0_191] > at >javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680) > at >javax.security.auth.login.LoginContext.login(LoginContext.java:587) > at >org.apache.activemq.security.JaasAuthenticationBroker.authenticate(JaasAuthenticationBroker.java:92) > ... 15 more > >Credentials are correct as other apps are using it . However we tried >to >set these credentials at /etc/users.properties under karaf realm >without >any success. Any idea/ hint how we can sort this issue out? > >Thanks in advance > >Xavier > >-- >Xavier Medina > >nuTravel Technology Solutions <http://www.nutravel.com/> A Mundi Global >Alliance <http://www.mundiglobalalliance.com/> Member > >[image: Twitter] <http://www.twitter.com/nuTravel> [image: Facebook] ><http://www.facebook.com/nuTravel> [image: LinkedIn] ><http://www.linkedin.com/company/nutravel-technology-solutions> [image: >Google+] <https://plus.google.com/b/117355695773932797524/> >This email and any files transmitted with it are confidential and >intended >solely for the use of the individual or entity to whom they are >addressed. >If you have received this email in error please notify the system >manager. > >-- > > >_CONFIDENTIALITY NOTICE:_ > >_The contents of this email message and any >attachments are intended solely for the addressee(s) and may contain >confidential and/or privileged information and may be legally protected > >from disclosure. If you are not the intended recipient of this message >or >their agent, or if this message has been addressed to you in error, >please >immediately alert the sender by reply email and then delete this >message >and any attachments. If you are not the intended recipient, you are >hereby >notified that any use, dissemination, copying, or storage of this >message >or its attachments is strictly prohibited. Any disclosure, >reproduction, >distribution or other use of this message or any attachments by an >individual or entity other than the intended recipient is prohibited._
