mattrpav opened a new pull request, #2754:
URL: https://github.com/apache/activemq/pull/2754

   Connections that authenticate without client-supplied credentials, such as 
SSL certificate authentication or anonymous access, show a blank UserName on 
the connection MBeans even with populateUserNameInMBeans enabled, because the 
view only reads ConnectionInfo.getUserName().
   
   Mirror the JMSXUserID handling in UserIDBroker: a new BrokerService flag 
useAuthenticatedPrincipalForUserNameInMBeans (default false) makes 
ManagedTransportConnection fall back to the connection's SecurityContext when 
ConnectionInfo carries no user name, preferring the UserPrincipal name (for 
certificate logins the mapped user rather than the certificate DN) and then the 
security context user name. A client-supplied user name is never replaced.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information, visit: https://activemq.apache.org/contact


Reply via email to