You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@artemis.apache.org by "Justin Bertram (Jira)" <ji...@apache.org> on 2026/07/02 14:41:00 UTC
[jira] [Comment Edited] (ARTEMIS-5724) MQTT Last Will not sent because denied authorization
[ https://issues.apache.org/jira/browse/ARTEMIS-5724?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18093012#comment-18093012 ]
Justin Bertram edited comment on ARTEMIS-5724 at 7/2/26 2:40 PM:
-----------------------------------------------------------------
We had another occurrence of this issue last week. Has there been any progress on providing this feature request?
{noformat}
2026-06-02T23:58:56.540545604Z at org.apache.activemq.artemis.core.protocol.mqtt.MQTTPublishManager.sendToQueue(MQTTPublishManager.java:242)
2026-06-02T23:58:56.540553759Z at org.apache.activemq.artemis.core.protocol.mqtt.MQTTProtocolHandler.handlePublish(MQTTProtocolHandler.java:322)
2026-06-02T23:58:56.540561643Z at org.apache.activemq.artemis.core.protocol.mqtt.MQTTProtocolHandler.act(MQTTProtocolHandler.java:164)
2026-06-02T23:58:56.540571782Z at org.apache.activemq.artemis.utils.actors.Actor.doTask(Actor.java:32)
2026-06-02T23:58:56.540580599Z at org.apache.activemq.artemis.utils.actors.ProcessorBase.executePendingTasks(ProcessorBase.java:69)
2026-06-02T23:58:56.540605215Z at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
2026-06-02T23:58:56.540613019Z at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
2026-06-02T23:58:56.540620753Z at org.apache.activemq.artemis.utils.ActiveMQThreadFactory$1.run(ActiveMQThreadFactory.java:120)
2026-06-02T23:58:56.540697546Z 2026-06-02 23:58:56,540 WARN [org.apache.activemq.artemis.core.server]AMQ222216: Security problem while authenticating: AMQ229031: Unable to validate user from 127.0.0.6:42555. Username: x3008c0s35b0n0; SSL certificate subject DN: unavailable
2026-06-02T23:58:56.540715490Z 2026-06-02 23:58:56,540 ERROR [org.apache.activemq.artemis.core.protocol.mqtt] AMQ834007: Authorization failure sending will message: AMQ229031: Unable to validate user from 127.0.0.6:42555. Username: x3008c0s35b0n0; SSL certificate subject DN: unavailable{noformat}
was (Author: JIRAUSER311333):
We had another occurrence of this issue last week. Has there been any progress on providing this feature request?
2026-06-02T23:58:56.540545604Z at org.apache.activemq.artemis.core.protocol.mqtt.MQTTPublishManager.sendToQueue(MQTTPublishManager.java:242)
2026-06-02T23:58:56.540553759Z at org.apache.activemq.artemis.core.protocol.mqtt.MQTTProtocolHandler.handlePublish(MQTTProtocolHandler.java:322)
2026-06-02T23:58:56.540561643Z at org.apache.activemq.artemis.core.protocol.mqtt.MQTTProtocolHandler.act(MQTTProtocolHandler.java:164)
2026-06-02T23:58:56.540571782Z at org.apache.activemq.artemis.utils.actors.Actor.doTask(Actor.java:32)
2026-06-02T23:58:56.540580599Z at org.apache.activemq.artemis.utils.actors.ProcessorBase.executePendingTasks(ProcessorBase.java:69)
2026-06-02T23:58:56.540605215Z at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136)
2026-06-02T23:58:56.540613019Z at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
2026-06-02T23:58:56.540620753Z at org.apache.activemq.artemis.utils.ActiveMQThreadFactory$1.run(ActiveMQThreadFactory.java:120)
2026-06-02T23:58:56.540697546Z 2026-06-02 23:58:56,540 WARN [org.apache.activemq.artemis.core.server]AMQ222216: Security problem while authenticating: AMQ229031: Unable to validate user from 127.0.0.6:42555. Username: x3008c0s35b0n0; SSL certificate subject DN: unavailable
2026-06-02T23:58:56.540715490Z 2026-06-02 23:58:56,540 ERROR [org.apache.activemq.artemis.core.protocol.mqtt] AMQ834007: Authorization failure sending will message: AMQ229031: Unable to validate user from 127.0.0.6:42555. Username: x3008c0s35b0n0; SSL certificate subject DN: unavailable
> MQTT Last Will not sent because denied authorization
> ----------------------------------------------------
>
> Key: ARTEMIS-5724
> URL: https://issues.apache.org/jira/browse/ARTEMIS-5724
> Project: Artemis
> Issue Type: New Feature
> Affects Versions: 2.42.0
> Reporter: Paul Shields
> Priority: Major
>
> We are using the Last Lill and Testament (LWT) feature of MQTT but are also using JWTs for authentication. We are using a custom JASSSecurityManager plugin for this. The usage of JWT and LWT are competing features, since JWT expires and LWT is intended to alert for unplanned disconnect of long-running connections. We are seeing LWT messages not being sent because the LWT SEND message is being sent after the expiration time of the JWT and Artemis issues an ERROR.
> 2025-10-14 15:07:21,076 WARN [org.apache.activemq.artemis.core.server] AMQ222216: Security problem while authenticating: AMQ229031: Unable to validate user from 127.0.0.6:36441. Username: x3000c0s11b0n0; SSL certificate subject DN: unavailable
> 2025-10-14 15:07:21,077 ERROR [org.apache.activemq.artemis.core.protocol.mqtt] AMQ834007: Authorization failure sending will message: AMQ229031: Unable to validate user from 127.0.0.6:36441. Username: x3000c0s11b0n0; SSL certificate subject DN: unavailable
> It seems that Artemis is performing the authorization for the LWT when the LWT is being sent and not when the client makes the connection to the broker and the LWT is configured/set for the client.
> A possible solution is that a feature could be added to Artemis so that LWT are authorized on connect to avoid this kind of problem. This behavior would be off by default so as not to impact existing users.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@artemis.apache.org
For additional commands, e-mail: issues-help@artemis.apache.org