[AMQ-7437] Active mq web console error in karaf with java.security.policy

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 5.15.11
• Component/s: Web Console

Environment

(Docker) java: amazoncorretto:8u242

Activemq : 5.15.11

Karaf: 4.2.8

Pax-web-features: 7.3.6 (Overwritten repo)

Spring: 5.1.9.RELEASE_1 (using classpath xsd url in activemq.xml)

Camel :  2.22.1

 

• Assignee: Unassigned
• Reporter: Willem Borgesius
• Created: 06/Mar/20 07:46
• Updated: 06/Mar/20 13:43

Description

Running karaf with java.security.policy=${karaf.etc}/all.policy (preset in system properties, just uncommented) i get a stacktrace when accessing activemq web console. 

 

Contents of all.policy(removed license for readability):

grant

{ permission java.security.AllPermission; }

;

 

I need to have the java security manager active because our applicaties still relies on RMI and the RMIClassloader won't work without a securitymanager. Unfortunately for the web console i get this exception:

java.security.AccessControlException: access denied ("javax.security.auth.AuthPermission" "getSubject")

 

I added a text file with the full stack trace. I am unsure in which component the problem lies, but the rest of karaf seems to work.