You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "Paul (JIRA)" <ji...@apache.org> on 2016/04/09 05:29:25 UTC
[jira] [Closed] (AMQ-6236) OOTB, security does not appear to work
[ https://issues.apache.org/jira/browse/AMQ-6236?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Paul closed AMQ-6236.
---------------------
Resolution: Not A Bug
user error. Connection can be created, but createSession (the important part) fails
> OOTB, security does not appear to work
> --------------------------------------
>
> Key: AMQ-6236
> URL: https://issues.apache.org/jira/browse/AMQ-6236
> Project: ActiveMQ
> Issue Type: Bug
> Components: security
> Affects Versions: 5.13.2
> Environment: Mac OSX 10.11.3 (15D21)
> java version "1.8.0_66"
> Java(TM) SE Runtime Environment (build 1.8.0_66-b17)
> Java HotSpot(TM) 64-Bit Server VM (build 25.66-b17, mixed mode)
> Reporter: Paul
>
> download 5.13.2 - don't touch it other than to extract that tar
> cd into ActiveMQ home
> export ACTIVEMQ_ENCRYPTION_PASSWORD=activemq
> bin/activemq console xbean:examples/conf/activemq-security.xml
> (starts up)
> Run this java code: note absence of all username and password fields:
> {code:title=java|borderStyle=solid}
> public static void main(String[] args) throws Exception{
> System.out.println("1");
> System.out.println("2");
> ConnectionFactory cf =
> new ActiveMQConnectionFactory("tcp://192.168.3.106:61616");
> System.out.println("3");
> Connection conn = cf.createConnection();//userName, password);
> System.out.println("4");
> }
> {code}
> Output is:
> 1
> 2
> 3
> 4
> There are no exceptions at all. In debug mode I can step over the connection-creation.
> *Surely* this should fail? I have in fact been unable to get any connection rejected no matter how I configure it. Is this the result of connecting from the machine on which ActiveMQ is running?
> I want to believe this is user error but after hours I am unable to prove myself at fault.
> If I add anonymousAccessAllowed="false" to the simpleAuthenticationPlugin I get the same behavior
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)