You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@activemq.apache.org by "Paul (JIRA)" <ji...@apache.org> on 2016/04/09 01:59:25 UTC

[jira] [Created] (AMQ-6236) OOTB, security does not appear to work

Paul created AMQ-6236:
-------------------------

             Summary: OOTB, security does not appear to work
                 Key: AMQ-6236
                 URL: https://issues.apache.org/jira/browse/AMQ-6236
             Project: ActiveMQ
          Issue Type: Bug
          Components: security
    Affects Versions: 5.13.2
         Environment: Mac OSX 10.11.3 (15D21)

java version "1.8.0_66"
Java(TM) SE Runtime Environment (build 1.8.0_66-b17)
Java HotSpot(TM) 64-Bit Server VM (build 25.66-b17, mixed mode)

            Reporter: Paul


download 5.13.2 - don't touch it other than to extract that tar

cd {ActiveMQ home}
export ACTIVEMQ_ENCRYPTION_PASSWORD=activemq

bin/activemq console xbean:examples/conf/activemq-security.xml

(starts up)

Run this java code: note absence of all username and password fields:

public static void main(String[] args) throws Exception{
	System.out.println("1");
	System.out.println("2");
	ConnectionFactory cf = 
		new ActiveMQConnectionFactory("tcp://192.168.3.106:61616");
	System.out.println("3");
	Connection conn = cf.createConnection();//userName, password);
	System.out.println("4");
}

Output is:
1
2
3
4

There are no exceptions at all. In debug mode I can step over the connection-creation.

*Surely* this should fail? I have in fact been unable to get any connection rejected no matter how I configure it. Is this the result of connecting from the machine on which ActiveMQ is running?

I want to believe this is user error but after hours I am  unable to prove myself at fault.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)