Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-5207

[LTS] AMQ: addSecuritySettings reset with updated broker.xml

    XMLWordPrintable

Details

    • False
    • False
    • Undefined
    • Hide

      Step 1: add security setting

      $ curl -k --user admin:admin -H "Origin: http://localhost:8161" "http://localhost:8161/console/jolokia/exec/org.apache.activemq.artemis:broker=%220.0.0.0%22/addSecuritySettings(java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String)/FOO/myrole/myrole/myrole/myrole/myrole/myrole/myrole"
{"request":{"mbean":"org.apache.activemq.artemis:broker=\"0.0.0.0\"","arguments":["FOO","myrole","myrole","myrole","myrole","myrole","myrole","myrole"],"type":"exec","operation":"addSecuritySettings(java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String)"},"value":null,"timestamp":1624306847,"status":200}

      Step 2: Check roles on queue

      $ curl -k --user admin:admin --user admin:admin -H "Origin: http://localhost:8161" "http://localhost:8161/console/jolokia/exec/org.apache.activemq.artemis:broker=%220.0.0.0%22/getRoles(java.lang.String)/FOO"
{"request":{"mbean":"org.apache.activemq.artemis:broker=\"0.0.0.0\"","arguments":["FOO"],"type":"exec","operation":"getRoles(java.lang.String)"},"value":[["myrole",true,true,true,true,true,true,true]],"timestamp":1624306875,"status":200}

      Step 3:
      Update broker.xml, for example add a newline. Observe broker.xml is reloaded.

      Step 4:
      Re-check roles, note that the queue roles have been reset

      $ curl -k --user admin:admin --user admin:admin -H "Origin: http://localhost:8161" "http://localhost:8161/console/jolokia/exec/org.apache.activemq.artemis:broker=%220.0.0.0%22/getRoles(java.lang.String)/FOO"
{"request":{"mbean":"org.apache.activemq.artemis:broker=\"0.0.0.0\"","arguments":["FOO"],"type":"exec","operation":"getRoles(java.lang.String)"},"value":[["amq",true,true,true,true,true,true,true]],"timestamp":1624306899,"status":200}
      Show
      Step 1: add security setting $ curl -k --user admin:admin -H "Origin: http: //localhost:8161" "http://localhost:8161/console/jolokia/exec/org.apache.activemq.artemis:broker=%220.0.0.0%22/addSecuritySettings(java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String )/FOO/myrole/myrole/myrole/myrole/myrole/myrole/myrole" { "request" :{ "mbean" : "org.apache.activemq.artemis:broker=\" 0.0.0.0\ ""," arguments ":[" FOO "," myrole "," myrole "," myrole "," myrole "," myrole "," myrole "," myrole "]," type ":" exec "," operation ":" addSecuritySettings(java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ,java.lang. String ) "}," value ": null ," timestamp ":1624306847," status":200} Step 2: Check roles on queue $ curl -k --user admin:admin --user admin:admin -H "Origin: http: //localhost:8161" "http://localhost:8161/console/jolokia/exec/org.apache.activemq.artemis:broker=%220.0.0.0%22/getRoles(java.lang. String )/FOO" { "request" :{ "mbean" : "org.apache.activemq.artemis:broker=\" 0.0.0.0\ ""," arguments ":[" FOO "]," type ":" exec "," operation ":" getRoles(java.lang. String ) "}," value ":[[" myrole ", true , true , true , true , true , true , true ]]," timestamp ":1624306875," status":200} Step 3: Update broker.xml, for example add a newline. Observe broker.xml is reloaded. Step 4: Re-check roles, note that the queue roles have been reset $ curl -k --user admin:admin --user admin:admin -H "Origin: http: //localhost:8161" "http://localhost:8161/console/jolokia/exec/org.apache.activemq.artemis:broker=%220.0.0.0%22/getRoles(java.lang. String )/FOO" { "request" :{ "mbean" : "org.apache.activemq.artemis:broker=\" 0.0.0.0\ ""," arguments ":[" FOO "]," type ":" exec "," operation ":" getRoles(java.lang. String ) "}," value ":[[" amq ", true , true , true , true , true , true , true ]]," timestamp ":1624306899," status":200}

    Description

      If dynamically adding a role to a queue via addSecuritySettings, then subsequently updating broker.xml (e.g. add a newline), the role configuration for the queue is reset.

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. ENTMQBR-5141 AMQ: addSecuritySettings reset with updated broker.xml

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              rhn-support-jbertram Justin Bertram
              rhn-support-dhawkins Duane Hawkins
              Roman Vais Roman Vais
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: