Hi Aleksandr,

maybe this issue is due to the cache, see
https://github.com/apache/activemq-artemis/blob/2.31.0/artemis-server/src/main/java/org/apache/activemq/artemis/core/security/impl/SecurityStoreImpl.java#L409

Could you try to clear the authentication cache using the operation
clearAuthenticationCache?

If that doesn't work could you enable the log
for org.apache.activemq.artemis.core.security?

logger.artemis_security.name=org.apache.activemq.artemis.core.security
logger.artemis_security.level=TRACE

If you see `TRACE
[org.apache.activemq.artemis.core.security.impl.SecurityStoreImpl] checking
access permissions to` in the log before a failed sending it means that is
failing the check and not the authentication.

Regards,
Domenico


On Thu, 19 Oct 2023 at 09:00, MILOVIDOV Aleksandr
<aleksandr.milovi...@raiffeisen.ru.invalid> wrote:

> Hi Domenico,
>
> > this should only happen if the user logged in the console doesn't have
> the
> > required roles to send messages to the desired addresses (check the
> > security-settings in broker xml).
>
> Current user has permissions to send message.
> If we turn off "use current logon user" checkbox and specify username and
> password, the message is sent successfully.
> When user has no permissions to send message, another error occurs:
> Could not send message: java.lang.IllegalStateException : AMQ229032: User:
> test_user does not have permission='SEND' on address TEST
>
> The problem is that when "use current logon user" is checked, on some
> servers credentials from management console are not passed from management
> console session to the broker where credentials are used to send the
> message.
> Unfortunately I cannot figure out the difference between servers on which
> this feature works and other servers where it does not work. I would
> appreciate if anyone has any ideas.
>
> --
> Best regards,
> Aleksandr
>
>
> -----------------------------------
>
> This message and any attachment are confidential and may be privileged or
> otherwise protected from disclosure. If you are not the intended recipient
> any use, distribution, copying or disclosure is strictly prohibited. If you
> have received this message in error, please notify the sender immediately
> either by telephone or by e-mail and delete this message and any attachment
> from your system. Correspondence via e-mail is for information purposes
> only. AO Raiffeisenbank neither makes nor accepts legally binding
> statements by e-mail unless otherwise agreed.
>
> -----------------------------------
>

Reply via email to