ActiveMQ
  1. ActiveMQ
  2. AMQ-2521

Some JMX operations fail with SecurityException with secured broker

    Details

    • Type: Bug Bug
    • Status: Resolved
    • Priority: Minor Minor
    • Resolution: Fixed
    • Affects Version/s: 5.3.0
    • Fix Version/s: 5.6.0, 5.7.0
    • Component/s: Broker
    • Labels:
      None
    • Environment:

      I've reproduced this on OS X and Linux

      Description

      I've started a secured broker using the sample configuration as follows:

      ./activemq xbean:file:../conf/activemq-security.xml

      After the broker was started, I used the example ProducerTool to put 2000 messages on the TEST.FOO queue. For this to work, I modified the ProducerTool to use username/password as follows:

      private String user = "system";
      private String password = "manager";

      I then connected to the broker using jconsole, and created a new queue using the Broker's addQueue MBean operation. As a test, I also used the TEST.FOO queue's removeMessage MBean operation to remove a message from the queue.

      The problem is that certain MBean operations fail with "Problem invoking moveMessageTo : java.lang.SecurityException: User is not authenticated." I have seen this with a queue's sendTextMessage and moveMessageTo operations.

      The full exception as logged by the broker for the failed sendTextMessage operation is:

      WARN | Failed to add Connection
      java.lang.SecurityException: User name or password is invalid.
      at org.apache.activemq.security.SimpleAuthenticationBroker.addConnection(SimpleAuthenticationBroker.java:52)
      at org.apache.activemq.broker.BrokerFilter.addConnection(BrokerFilter.java:82)
      at org.apache.activemq.broker.MutableBrokerFilter.addConnection(MutableBrokerFilter.java:89)
      at org.apache.activemq.broker.TransportConnection.processAddConnection(TransportConnection.java:666)
      at org.apache.activemq.command.ConnectionInfo.visit(ConnectionInfo.java:134)
      at org.apache.activemq.broker.TransportConnection.service(TransportConnection.java:297)
      at org.apache.activemq.broker.TransportConnection$1.onCommand(TransportConnection.java:175)
      at org.apache.activemq.transport.ResponseCorrelator.onCommand(ResponseCorrelator.java:109)
      at org.apache.activemq.transport.TransportFilter.onCommand(TransportFilter.java:68)
      at org.apache.activemq.transport.vm.VMTransport.iterate(VMTransport.java:205)
      at org.apache.activemq.thread.DedicatedTaskRunner.runTask(DedicatedTaskRunner.java:98)
      at org.apache.activemq.thread.DedicatedTaskRunner$1.run(DedicatedTaskRunner.java:36)

      This seems similar to AMQ-2516. I've tried this using the 5.3.1 and 5.4 SNAPSHOTs and see the same thing.

        Activity

        Transition Time In Source Status Execution Times Last Executer Last Execution Date
        Open Open Resolved Resolved
        1063d 20h 6m 1 Timothy Bish 02/Nov/12 15:04
        Timothy Bish made changes -
        Status Open [ 1 ] Resolved [ 5 ]
        Fix Version/s 5.7.0 [ 12321258 ]
        Fix Version/s 5.6.0 [ 12317974 ]
        Resolution Fixed [ 1 ]
        Hide
        Timothy Bish added a comment -

        This has since been fixed and works in at least 5.6 and 5.7+

        Show
        Timothy Bish added a comment - This has since been fixed and works in at least 5.6 and 5.7+
        Jeff Turner made changes -
        Project Import Fri Nov 26 22:32:02 EST 2010 [ 1290828722158 ]
        Bruce Snyder made changes -
        Fix Version/s 5.4.1 [ 12332 ]
        Rob Davies made changes -
        Field Original Value New Value
        Fix Version/s 5.4.1 [ 12332 ]
        Phil Pickett created issue -

          People

          • Assignee:
            Unassigned
            Reporter:
            Phil Pickett
          • Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development