RE: Connection router for filtering certificate based users

2025-05-07 Thread Shiv Kumar Dixit
connection router doesn't resolve the USER_NAME key when the connection is authenticated with the TextFileCertificateLoginModule, this is a bug, I created the following issue: https://issues.apache.org/jira/browse/ARTEMIS-5465 Regards, Domenico On Tue, 6 May 2025 at 16:22, Shiv Kumar Dixit

Connection router for filtering certificate based users

2025-05-06 Thread Shiv Kumar Dixit
Hi Domenico I am exploring how to restrict users (specially certificate based) for connecting based on certain conditions. I came across https://lists.apache.org/thread/not2kzq23vx60zjvsl9ffrx7rfps6wzs. I tried to use USER_NAME key for filtering and it worked fine for basic authentication users

RE: Issue in artemis mask/unmask

2025-04-25 Thread Shiv Kumar Dixit
tting ARTEMIS-4154 [1]. Justin [1] https://issues.apache.org/jira/browse/ARTEMIS-4154 On Wed, Apr 23, 2025 at 8:21 AM Shiv Kumar Dixit wrote: > Hi team, > We are facing an issue in using artemis mask/unmask for certain literals. > When such literals are present as part of password

Issue in artemis mask/unmask

2025-04-23 Thread Shiv Kumar Dixit
Hi team, We are facing an issue in using artemis mask/unmask for certain literals. When such literals are present as part of password, unmasking is resulting in generation of garbage characters. Artemis version is 2.37.0. Working case: artemis mask MtWr35yhVOqbvR7hfqcw result: -d3cac5bbbf2d5d182

RE: Additional Info on certificate based authentication errors

2025-04-17 Thread Shiv Kumar Dixit
Final/ [2] https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/2.0.70.Final/netty-tcnative-boringssl-static-2.0.70.Final-linux-x86_64.jar On Wed, Apr 16, 2025 at 9:50 AM Shiv Kumar Dixit wrote: > Thanks Domenico. > > I could download both jars and placed them in my W

RE: Additional Info on certificate based authentication errors

2025-04-16 Thread Shiv Kumar Dixit
cnative-boringssl-static-2.0.70.Final-windows-x86_64.jar [2] https://repo1.maven.org/maven2/io/netty/netty-tcnative-classes/2.0.70.Final/netty-tcnative-classes-2.0.70.Final.jar Regards, Domenico On Tue, 15 Apr 2025 at 14:41, Shiv Kumar Dixit wrote: > Hi Domenico/Justin, > Somehow Using O

RE: Additional Info on certificate based authentication errors

2025-04-15 Thread Shiv Kumar Dixit
.html Regards, Domenico On Mon, 14 Apr 2025 at 10:42, Shiv Kumar Dixit wrote: > Hi Domenico, > I am putting netty-tcnative-2.0.70.Final.jar in broker_home/lib folder > but still the same error. I am running broker on a Windows laptop. Do > I need to have openssl installed as pr

RE: Additional Info on certificate based authentication errors

2025-04-14 Thread Shiv Kumar Dixit
eed to add `netty-tcnative` to your classpath to use the native installed openssl. Regards, Domenico On Fri, 11 Apr 2025 at 11:37, Shiv Kumar Dixit wrote: > Hi Justin, > I set connectionsAllowed=3 on acceptor. I then ran 3 good listener apps. > It created 3 good connections and

RE: Additional Info on certificate based authentication errors

2025-04-11 Thread Shiv Kumar Dixit
tions in the process of producing and/or consuming messages then connectionsAllowed will stop that. Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/configuring-transports.html#configuring-netty-ssl?:~:text=sslProvider On Thu, Apr 10, 2025 at 11:57 AM Shiv Kumar Dixit

RE: Additional Info on certificate based authentication errors

2025-04-10 Thread Shiv Kumar Dixit
ents/artemis/documentation/latest/configuring-transports.html#configuring-netty-ssl On Thu, Apr 3, 2025 at 9:58 AM Shiv Kumar Dixit wrote: > Hi Justin, > We have defined our acceptors with needClientAuth=true as we want > 2-way SSL. How can we find out when a client connects to broker

RE: Additional Info on certificate based authentication errors

2025-04-10 Thread Shiv Kumar Dixit
tivemq.apache.org/components/artemis/documentation/latest/resource-limits.html#resource-limits On Wed, Apr 9, 2025 at 8:20 AM Shiv Kumar Dixit wrote: > Thanks Justin for input. > > I am trying with OpenSSL and handshake-timeout=30 changes for now. I > will update how it goes. Post that

RE: Additional Info on certificate based authentication errors

2025-04-09 Thread Shiv Kumar Dixit
heap memory usage. Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/metrics.html#metrics [2] https://activemq.apache.org/components/artemis/documentation/latest/metrics.html#optional-metrics On Tue, Apr 8, 2025 at 4:14 AM Shiv Kumar Dixit wrote: > Hi Justin, >

RE: Additional Info on certificate based authentication errors

2025-04-03 Thread Shiv Kumar Dixit
inspect the cert data on the connection. Justin [1] https://github.com/apache/activemq-artemis/blob/main/artemis-core-client/src/main/java/org/apache/activemq/artemis/core/remoting/CertificateUtil.java On Thu, Apr 3, 2025 at 2:16 AM Shiv Kumar Dixit wrote: > Hi Justin, > Thanks for

RE: Additional Info on certificate based authentication errors

2025-04-03 Thread Shiv Kumar Dixit
tps://activemq.apache.org/components/artemis/documentation/latest/configuring-transports.html#configuring-the-transport#:~:text=localPort [2] https://activemq.apache.org/components/classic/documentation/how-do-i-define-a-local-address-and-local-port-for-tcp-or-ssl On Fri, Mar 28, 2025 at 10:12 AM

RE: Additional Info on certificate based authentication errors

2025-03-28 Thread Shiv Kumar Dixit
ent are you using to connect to the broker in this case? Justin [1] https://github.com/apache/activemq-artemis/blob/c4b315ba0c1fafbe2d2c3ebf0cdd84f921f42b5a/artemis-server/src/main/java/org/apache/activemq/artemis/core/remoting/impl/netty/NettyAcceptor.java#L1014 On Thu, Mar 27, 2025 at 2:03 AM S

Additional Info on certificate based authentication errors

2025-03-27 Thread Shiv Kumar Dixit
Hi team, Currently we are using Apache Artemis 2.37.0. We have certificate-based customers. Many times, we see errors like below in broker log: AMQ08: SSL handshake failed for client from /a.b.c.d:53838: javax.net.ssl.SSLHandshakeException: Empty server certificate chain. AMQ08: SSL han

RE: Issue in clustering due to Large JMS Header

2024-06-18 Thread Shiv Kumar Dixit
tion%2Flatest%2Fcl >> usters.html%23configuring-cluster-connections&data=05%7C02%7C%7C898ba >> 62f27f7405274fd08dc8430119d%7C1a1dce2021b14beaa9d2130e9f1f6e2f%7C0%7C >> 0%7C638530589196352575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLC >> JQIjoiV2luMzIiLCJBTiI6Ik1haWwiLC

RE: Issue in clustering due to Large JMS Header

2024-06-03 Thread Shiv Kumar Dixit
guring-cluster-connections&data=05%7C02%7C%7C898ba >> 62f27f7405274fd08dc8430119d%7C1a1dce2021b14beaa9d2130e9f1f6e2f%7C0%7C >> 0%7C638530589196352575%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLC >> JQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=rCosd >> 0mRGxKWAfW1Unp

RE: Issue in clustering due to Large JMS Header

2024-06-03 Thread Shiv Kumar Dixit
Hi team, Is there any update/input on this topic? Seems we are being hit by this issue more frequently. Best Regards Shiv -Original Message- From: Shiv Kumar Dixit Sent: Thursday, May 30, 2024 12:35 PM To: users@activemq.apache.org Subject: Issue in clustering due to Large JMS Header

Issue in clustering due to Large JMS Header

2024-05-30 Thread Shiv Kumar Dixit
Hi team, We have a 2-node symmetric cluster. Producer writes on node1, and consumer consumes from node2. As the clustering is working fine, messages move from node1 to node2 for consumer. So far, the setup is working fine. One of our producers started writing larger custom JMS header to pass sta

RE: PowerShell and STOMP Support

2024-02-14 Thread Shiv Kumar Dixit
StorePassword=***&trustStorePath=mytruststore.jks&trustStorePassword=***' --protocol core --user admin --password admin --destination queue://TEST --message-count 1 --message 'Hello World!' Regards, Domenico On Mon, 12 Feb 2024 at 14:24, Shiv Kumar Dixit wrote: > Hi Domenico, > T

RE: PowerShell and STOMP Support

2024-02-12 Thread Shiv Kumar Dixit
the content is safe. Hi Shiv, for text messages you could use the artemis CLI, i.e. .\bin\artemis producer --url tcp://localhost:61616 --protocol core --user admin --password admin --destination queue://TEST --message-count 1 --message 'Hellow World!' Regards, Domenico On Mon, 12 Feb 2

PowerShell and STOMP Support

2024-02-12 Thread Shiv Kumar Dixit
Hi, I am exploring a way to securely (TLS) send/receive message to Artemis broker via PowerShell. Previously I tried configuring REST interface, but it was updated in community ticket that REST interface is now decommissioned, and STOMP protocol is expected to cover all the use cases intended fo

REST Interface for Artemis Broker

2024-01-24 Thread Shiv Kumar Dixit
Hi, I am looking to explore an HTTP based mechanism to send/receive messages to broker. Came across this link which explains setup of REST interface in Artemis broker - https://activemq.apache.org/components/artemis/documentation/1.0.0/rest.html. But the link seems from old documentation. If th

RE: Disabling clustering for a some addresses

2024-01-08 Thread Shiv Kumar Dixit
e no matter where they connect originally? Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/last-value-queues.html#clustering On Fri, Jan 5, 2024 at 8:25 AM Shiv Kumar Dixit wrote: > Thanks for the response. We are looking to use disabling clustering on >

RE: Disabling clustering for a some addresses

2024-01-05 Thread Shiv Kumar Dixit
syntax is noted in the documentation [1]. Justin [1] https://activemq.apache.org/components/artemis/documentation/latest/clusters.html#configuring-cluster-connections On Thu, Jan 4, 2024 at 7:32 AM Shiv Kumar Dixit wrote: > Hi, > Is it possible to disable clustering for some addresses?

RE: New Addition

2024-01-04 Thread Shiv Kumar Dixit
your message is already on the list. Justin On Thu, Jan 4, 2024 at 8:15 AM Shiv Kumar Dixit wrote: > Please add. > > Thanks > Shiv >

New Addition

2024-01-04 Thread Shiv Kumar Dixit
Please add. Thanks Shiv

Disabling clustering for a some addresses

2024-01-04 Thread Shiv Kumar Dixit
Hi, Is it possible to disable clustering for some addresses? E.g. if I have 2 nodes in a broker cluster and given address TEST.DEMO is present on both nodes. If messages are pending on node A and consumer connects to node B then by virtue of clustering, messages move from node A to node B and c

Documentation for Apache.NMS.AMQP TLS/SSL Configuration

2023-12-05 Thread Shiv Kumar Dixit
Hi team, .Net based client wants to use Apache.NMS.AMQP API (AMQPS) with certificate based authentication to connect to Artemis broker. They need some documentation/example as how to configure certificate (private key and chain of certs etc.) with AMQPS broker URI. They are not able to find any

RE: Queue message consumption stopping abruptly till broker is restarted

2023-10-19 Thread Shiv Kumar Dixit
uce this problem relatively easily. Is > there any chance you could work up a reproducer you could share? > > > Justin > > On Tue, Oct 17, 2023 at 10:00 AM Shiv Kumar Dixit > wrote: > > > Hi, > > Is there any update on this topic? > > > > Best Regar

RE: Queue message consumption stopping abruptly till broker is restarted

2023-10-17 Thread Shiv Kumar Dixit
Hi, Is there any update on this topic? Best Regards, Shiv -Original Message- From: Shiv Kumar Dixit Sent: Wednesday, October 11, 2023 10:33 PM To: users@activemq.apache.org Subject: Queue message consumption stopping abruptly till broker is restarted CAUTION: EXTERNAL EMAIL - Sent

Queue message consumption stopping abruptly till broker is restarted

2023-10-11 Thread Shiv Kumar Dixit
Hi, One of Artemis broker clients is facing a strange issue where consumer application with 5 concurrent threads stop pulling messages from the queue after limited successful message processing. When the consumer application first starts, it receives the messages over 5 threads but after someti

RE: Automatically removing inactive durable topic subscribers

2023-10-11 Thread Shiv Kumar Dixit
wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7 > C%7C%7C&sdata=q60Gpa3xxKFULinTNBBUTzNUL2VwiuGhI3%2BxOMSydBg%3D&reserve > d=0 > > On Tue, Oct 10, 2023 at 6:47 AM Shiv Kumar Dixit > wrote: > >> Hi, >> If there a way in Artemis broker to automat

Automatically removing inactive durable topic subscribers

2023-10-10 Thread Shiv Kumar Dixit
Hi, If there a way in Artemis broker to automatically remove inactive durable topic subscribers. E.g. check every hour of inactive subscribers and remove the one who are not active for last 12 hours. Classic ActiveMQ has some configuration (https://activemq.apache.org/manage-durable-subscribers

RE: Pre-authentication with Broker

2023-08-22 Thread Shiv Kumar Dixit
before talking to the broker to ensure it had valid credentials. That, of course, would be a lot of extra work for the client and would pose a potential problem for the LDAP server itself. Justin [1] https://issues.apache.org/jira/browse/ARTEMIS-4306 On Mon, Jul 24, 2023 at 1:31 AM Shiv Ku

RE: Pre-authentication with Broker

2023-08-22 Thread Shiv Kumar Dixit
Hi Justin, We are using certificate based authentication. Below is the details of issue we faced with Artemis 2.27.1. 1. Host A has 10 client applications who use certificate based authentication. Most of them are using OpenWire protocol. Some are AMQP and core based as well. 2. 8 of them are con

RE: Pre-authentication with Broker

2023-08-20 Thread Shiv Kumar Dixit
Hi, Is there any suggestion on this topic? Best Regards, Shiv -Original Message- From: Shiv Kumar Dixit Sent: Monday, July 24, 2023 12:01 PM To: users@activemq.apache.org Subject: Pre-authentication with Broker [shivkumardi...@eurofins.com.invalid appears similar to someone who

RE: Unexpected Error Stopping Artemis 2.26.0 broker

2023-08-01 Thread Shiv Kumar Dixit
. I would try with latest release on paging as page-cache was removed. On Mon, Jul 24, 2023 at 7:26 AM Shiv Kumar Dixit wrote: > > We see below error in artemis.log and it is stopping the broker. Broker > version is 2.26.0. Before broker stops, we see many entries where paging on &g

RE: Issue in Message Sync via Core Bridge

2023-07-25 Thread Shiv Kumar Dixit
Eurofins. Do not click on links or open attachments unless you recognise the sender and are certain that the content is safe. What version of ActiveMQ Artemis are you using? Justin On Mon, Jul 24, 2023 at 5:41 AM Shiv Kumar Dixit wrote: > We are facing a strange issue while syncing messa

Unexpected Error Stopping Artemis 2.26.0 broker

2023-07-24 Thread Shiv Kumar Dixit
We see below error in artemis.log and it is stopping the broker. Broker version is 2.26.0. Before broker stops, we see many entries where paging on different addresses are starting and stopping. When paging related logs on different addresses are done, we see message 'Cannot find iter to remove:

Issue in Message Sync via Core Bridge

2023-07-24 Thread Shiv Kumar Dixit
We are facing a strange issue while syncing messages from source to target broker cluster using Core bridge. Our source and target brokers are symmetric cluster and each has 2 nodes. Since both source and target cluster has 2 nodes each, we have defined bridges from source cluster to target clu

Pre-authentication with Broker

2023-07-23 Thread Shiv Kumar Dixit
We would like to know if there is any mechanism to pre-authenticate broker users first (basic authentication or certificate authentication) and if the credentials/certificate is valid then only connection attempt is made on the broker. We are seeing a case where some users are either using inval

OpenWire Protocol Support in Artemis

2023-06-28 Thread Shiv Kumar Dixit
I would like to know if there is any plan to discontinue or decommission OpenWire protocol support in Artemis broker. Thanks Shiv