[ARTEMIS-5051] console jolokia default detector config makes unauthenticated mbean requests that are denied by ArtemisRbacMBeanServerBuilder

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.37.0
• Fix Version/s: 2.38.0
• Component/s: Web Console
• Assignee: Gary Tully
• Reporter: Gary Tully
• Created: 18/Sep/24 18:49
• Updated: 16/Oct/24 16:02
• Resolved: 20/Sep/24 11:24

Description

The resulting errors are not consequential but very ugly.

broker with: java ... -Dhawtio.role=* -Djavax.management.builder.initial=org.apache.activemq.artemis.core.server.management.ArtemisRbacMBeanServerBuilder

errors of the form:

AMQ601716: User anonymous@internal failed authentication on connection management, reason: AMQ229031: Unable to validate user from management. Username: null; SSL certificate subject DN: unavailable
jolokia-agent: Error while using detector GeronimoDetector: java.lang.SecurityException: AMQ229031: Unable to validate user from management. Username: null; SSL certificate subject DN: unavailable
java.lang.SecurityException: AMQ229031: Unable to validate user from management. Username: null; SSL certificate subject DN: unavailable
at org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.securityCheck(ArtemisRbacInvocationHandler.java:207)
at org.apache.activemq.artemis.core.server.management.ArtemisRbacInvocationHandler.invoke(ArtemisRbacInvocationHandler.java:71)
at jdk.proxy2/jdk.proxy2.$Proxy29.queryNames 
at org.jolokia.backend.executor.AbstractMBeanServerExecutor.queryNames(AbstractMBeanServerExecutor.java:113)
at org.jolokia.detector.AbstractServerDetector.searchMBeans(AbstractServerDetector.java:46)
at org.jolokia.detector.AbstractServerDetector.getSingleStringAttribute(AbstractServerDetector.java:124)
at org.jolokia.detector.GeronimoDetector.detect(GeronimoDetector.java:32)

Issue Links

• links to: GitHub Pull Request #5238