[esb-issues] [JBoss JIRA] Reopened: (JBESB-1358) ESB does not include security principals when accessing secured JMX domain

ESB does not include security principals when accessing secured JMX domain --------------------------------------------------------------------------- Key: JBESB-1358 URL: http://jira.jboss.com/jira/browse/JBESB-1358 Project: JBoss ESB Issue Type: Bug Security Level: Public(Everyone can see) Components: Security Affects Versions: 4.2.1 Environment: SOA Platform IR6 Reporter: Christopher Brock Assigned To: Kevin Conner Priority: Blocker Fix For: 4.3, 4.2.1 CP1 The ESB server does not appear to be passing any security credentials when it requests resources from inside the JMX context. This is problematic for the SOA platform, as the JMX security domain is secured out of the box. Stack Trace Below: org.jboss.soa.esb.actions.ActionProcessingException: Unexpected invocation target exception from processor at org.jboss.soa.esb.listeners.message.ActionProcessorMethodInfo.processMethods(ActionProcessorMethodInfo.java:127) at org.jboss.soa.esb.listeners.message.OverriddenActionLifecycleProcessor.process(OverriddenActionLifecycleProcessor.java:74) at org.jboss.soa.esb.listeners.message.ActionProcessingPipeline.process(ActionProcessingPipeline.java:316) at org.jboss.soa.esb.listeners.message.MessageAwareListener$1.run(MessageAwareListener.java:303) at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:650) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:675) at java.lang.Thread.run(Thread.java:613) Caused by: java.lang.SecurityException: Failed to authenticate principal=null, securityDomain=jmx-console at org.jboss.jmx.connector.invoker.AuthenticationInterceptor.invoke(AuthenticationInterceptor.java:97) at org.jboss.mx.server.Invocation.invoke(Invocation.java:88) at org.jboss.mx.server.AbstractMBeanInvoker.invoke(AbstractMBeanInvoker.java:264) at org.jboss.mx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:659) at org.jboss.invocation.jrmp.server.JRMPProxyFactory.invoke(JRMPProxyFactory.java:179) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)