Uploaded image for project: 'A-MQ Messaging-as-a-Service'
  1. A-MQ Messaging-as-a-Service
  2. ENTMQMAAS-2678

broker-support user unable to perform management functions since AMQ Broker 7.8.

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • Major
    • 1.7.0
    • None
    • broker-plugin
    • None
    • False
    • False
    • Undefined

    Description

      Since taking AMQ Broker 7.7, the broker-support has become broken. Specifically, the user authenticates correctly, but does not have permission to execute broker methods.

      2021-03-07T22:33:39.569Z INFO [resource] AMQ601718: User broker-support-8b0ba912-700f-4296-b614-faf4b61f574c(admin)@127.0.0.1:35108 does not have correct role to access getAddress on management object org.apache.activemq.artemis:broker="broker-e180e00-5kzy-0",component=addresses,address="message-redelivery"

      Turning up logging for Broker, I could see:

      021-03-08T10:38:51.077Z DEBUG [SaslDelegatingLogin] Support access configured
      2021-03-08T10:38:51.078Z DEBUG [SaslDelegatingLogin] Adding user principal for: broker-support-8b0ba912-700f-4296-b614-faf4b61f574c
      2021-03-08T10:38:51.078Z DEBUG [SaslDelegatingLogin] Adding role principal for: all
      2021-03-08T10:38:51.078Z DEBUG [SaslDelegatingLogin] Adding role principal for:
      2021-03-08T10:38:51.078Z DEBUG [SaslDelegatingLogin] Adding role principal for: admin

      comparing with Broker 7.6:

      2021-03-08T10:30:24.516Z DEBUG [SaslDelegatingLogin] Support access configured
      2021-03-08T10:30:24.516Z DEBUG [SaslDelegatingLogin] Adding user principal for: broker-support-8b0ba912-700f-4296-b614-faf4b61f574c
      2021-03-08T10:30:24.516Z DEBUG [SaslDelegatingLogin] Adding role principal for: all
      2021-03-08T10:30:24.516Z DEBUG [SaslDelegatingLogin] Adding role principal for: admin
      2021-03-08T10:30:24.516Z DEBUG [SaslDelegatingLogin] Adding role principal for: manage

      notice that the manage principal is absent.

      Attachments

        Activity

          People

            Unassigned Unassigned
            keithbwall Keith Wall
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: