Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-5450

requiredLogin: false and existing amqSecurity leads to only accepting logins defined in amqsecurity CR

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Minor Minor
    • None
    • AMQ 7.9.0.CR4
    • documentation
    • None
    • False
    • False

      Configuration:

       

      1) amq_broker.cr:

          requireLogin: false

      2) amq_security.cr:

      apiVersion: broker.amq.io/v1alpha1

kind: ActiveMQArtemisSecurity

metadata:

  name: ex-prop

spec:

  loginModules:

    propertiesLoginModules:

    - name: 'prop-module'

      users:

      - name: bob

        password: mysecret

        roles:

        - root

  securityDomains:

    brokerDomain:

      name: 'activemq'

      loginModules:

      - name: 'prop-module'

        flag: 'sufficient'

       

      result:

       

      login.config:

      activemq {
    org.apache.activemq.artemis.spi.core.security.jaas.PropertiesLoginModule sufficient
        org.apache.activemq.jaas.properties.user="artemis-users.properties"
        org.apache.activemq.jaas.properties.role="artemis-roles.properties";
};

      And web console doesn't accept users except for ones defined in amqSecurity.

       

      expected:

      Since requireLogin: false, non-defined logins should also be accepted.

       

            rhn-support-jbertram Justin Bertram
            mkrutov Mikhail Krutov
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: