Uploaded image for project: 'AMQ Broker'
  1. AMQ Broker
  2. ENTMQBR-7054

consoleDomain.name in ActiveMQArtemisSecurity is not reflected in artemis.profile ( -Dhawtio.realm is not changed)

XMLWordPrintable

    • False
    • None
    • False
    • Compatibility/Configuration
    • Workaround Exists
    • Hide

      Do not use other name than activemq for consoleDomain in ActiveMQArtemisSecurity.
      Or add env variable to custom resource where you hawtio realm.

      Show
      Do not use other name than activemq for consoleDomain in ActiveMQArtemisSecurity. Or add env variable to custom resource where you hawtio realm.
    • Hide

      In ActiveMQArtemisSecurity under spec.securityDomains add:

       consoleDomain:
            name: console
            loginModules:
              - name: prop-module
                flag: required
      

      In the broker pod, in the configuration file artemis.profile, Dhawtio.realm is unchanged:
      -Dhawtio.realm=activemq

      Show
      In ActiveMQArtemisSecurity under spec.securityDomains add: consoleDomain: name: console loginModules: - name: prop-module flag: required In the broker pod, in the configuration file artemis.profile , Dhawtio.realm is unchanged: -Dhawtio.realm=activemq

      If user adds new consoleDomain to ActiveMQArtemisSecurity, it is reflected in login.config but not in artemis.profile. Parameter -Dhawtio.realm=activemq stays the same, instead of changing to Dhawtio.realm=<new name in the console domain>.

      As a result, access to the console is not possible.

            gaohoward Howard Gao
            rhn-support-zstrmisk Zdenek Strmiska
            Roman Vais Roman Vais
            Votes:
            1 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated:
              Resolved: