activemq-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "anton.mithun" <>
Subject User privileges exception thrown from jaas / Authorization plugin format for jaas- artemis
Date Wed, 23 Nov 2016 15:59:38 GMT
I tried to implement a custom JAAS authentication module with

In bootstrap.xml,
<jaas-security domain="CustomLogin"/> 

In login.config,
CustomLogin {
    com.activemq.core.CustomLoginModule Sufficient

Call flow seems to get executed properly. LoginModule.login() is called and
returns true as in a normal case.

But I get a javax.jms.JMSSecurityException error saying  "AMQ119032: User:
amq does not have permission='CREATE_DURABLE_QUEUE' on address

I looked up in the internet, and found some posts regarding same sort of
issue in activemq/apollo.

In activemq these sort of issues might require us to provide a authorization
so that user gets read/write/connect/create permissions. 

  <jaasAuthenticationPlugin configuration="activemq-domain" />

          <authorizationEntry queue="foobarQueue"

In apollo, <access_rule allow="users" action="connect create destroy send
receive consume"/> 
and put the following line of code in LoginModule.login()
principals.add(new GroupPrincipal("users"));

But I cant find a way to sort it out in artemis. <plugin> tag doesnt work in
artemis I beleive. I dont even know if its about authorization issue to be
honest. But no error/exception is thrown from CustomLoginModule class. 

What might be the cause for this JMSSecurityException? if its regarding
authorization, what is authorization plugin format in artemis? Any insight
into this is much appreciated.

View this message in context:
Sent from the ActiveMQ - User mailing list archive at

View raw message