0 Replies Latest reply on Mar 10, 2016 12:19 PM by loganheights

    RBAC Prevents MBean Registration

    loganheights

      I have a JBoss standalone EAP 6.4 server that is working fine until I enable RBAC. For some reason having RBAC enabled results in a failure to register MBeans.

       

      I've set up RBAC with the basic jboss-cli command:

      /core-service=management/access=authorization:writeattribute(name=provider, value=rbac)

       

      The JBoss directory is set to jboss:jboss permissions and JBoss itself is started as a service. I've tried a variety of things with no success. Googled the heck out of this but haven't found anything related. On the plus side, it's very repeatable. With RBAC off, everything works correctly. With RBAC on, I get errors. Any ideas?

       

      With RBAC off:

      17:05:05,810 INFO  [org.infinispan.factories.GlobalComponentRegistry] (http-/x.x.x.x:8080-1) ISPN000128: Infinispan version: Infinispan 'Delirium' 5.2.11.Final

      17:05:05,961 INFO  [org.infinispan.factories.TransactionManagerFactory] (http-/x.x.x.x:8080-1) ISPN000161: Using a batchMode transaction manager

      17:05:06,481 INFO  [org.infinispan.jmx.CacheJmxRegistration] (http-/x.x.x.x:8080-1) ISPN000031: MBeans were successfully registered to the platform MBean server.

       

      With RBAC on:

      2016-03-10 16:10:12,433 INFO  [org.infinispan.factories.GlobalComponentRegistry] (http-/x.x.x.x:8080-1) ISPN000128: Infinispan version: Infinispan 'Delirium' 5.2.11.Final

      2016-03-10 16:10:12,555 INFO  [org.infinispan.factories.TransactionManagerFactory] (http-/x.x.x.x:8080-1) ISPN000161: Using a batchMode transaction manager

      org.jboss.resteasy.spi.UnhandledException: java.lang.IllegalStateException: JBAS011048: Failed to construct component instance

              at org.jboss.resteasy.core.SynchronousDispatcher.handleApplicationException(SynchronousDispatcher.java:364) [resteasy-jaxrs-2.3.10.Final-redhat-1.jar:]

              at org.jboss.resteasy.core.SynchronousDispatcher.handleException(SynchronousDispatcher.java:232) [resteasy-jaxrs-2.3.10.Final-redhat-1.jar:]

              at org.jboss.resteasy.core.SynchronousDispatcher.handleInvokerException(SynchronousDispatcher.java:208) [resteasy-jaxrs-2.3.10.Final-redhat-1.jar:]

              at org.jboss.resteasy.core.SynchronousDispatcher.getResponse(SynchronousDispatcher.java:556) [resteasy-jaxrs-2.3.10.Final-redhat-1.jar:]

              at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:523) [resteasy-jaxrs-2.3.10.Final-redhat-1.jar:]

              at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:125) [resteasy-jaxrs-2.3.10.Final-redhat-1.jar:]

      .

      .

      .

      Caused by: java.lang.IllegalStateException: JBAS011048: Failed to construct component instance

              at org.jboss.as.ee.component.BasicComponent.constructComponentInstance(BasicComponent.java:164) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]

              at org.jboss.as.ee.component.BasicComponent.constructComponentInstance(BasicComponent.java:135) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]

              at org.jboss.as.ee.component.BasicComponent.createInstance(BasicComponent.java:90) [jboss-as-ee-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]

      .

      .

      .

      Caused by: javax.ejb.EJBException: org.infinispan.CacheException: Unable to invoke method public void org.infinispan.jmx.CacheJmxRegistration.start() on object of type CacheJmxRegistration

              at org.jboss.as.ejb3.tx.CMTTxInterceptor.handleExceptionInOurTx(CMTTxInterceptor.java:191) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]

              at org.jboss.as.ejb3.tx.CMTTxInterceptor.invokeInOurTx(CMTTxInterceptor.java:282) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]

              at org.jboss.as.ejb3.tx.CMTTxInterceptor.requiresNew(CMTTxInterceptor.java:362) [jboss-as-ejb3-7.5.0.Final-redhat-21.jar:7.5.0.Final-redhat-21]

      .

      .

      .

      Caused by: org.infinispan.CacheException: Failure while registering mbeans

              at org.infinispan.jmx.ComponentsJmxRegistration.registerMBeans(ComponentsJmxRegistration.java:89) [infinispan-core-5.2.11.Final-redhat-2.jar:5.2.11.Final-redhat-2]

              at org.infinispan.jmx.AbstractJmxRegistration.registerMBeans(AbstractJmxRegistration.java:60) [infinispan-core-5.2.11.Final-redhat-2.jar:5.2.11.Final-redhat-2]

              at org.infinispan.jmx.CacheJmxRegistration.start(CacheJmxRegistration.java:83) [infinispan-core-5.2.11.Final-redhat-2.jar:5.2.11.Final-redhat-2]

              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.8.0_66]

      .

      .

      .

      Caused by: javax.management.JMRuntimeException: JBAS011360: Unauthorized access

              at org.jboss.as.jmx.PluggableMBeanServerImpl.authorizeSensitiveOperation(PluggableMBeanServerImpl.java:1177)

              at org.jboss.as.jmx.PluggableMBeanServerImpl.registerMBean(PluggableMBeanServerImpl.java:893)

              at org.infinispan.jmx.JmxUtil.registerMBean(JmxUtil.java:92) [infinispan-core-5.2.11.Final-redhat-2.jar:5.2.11.Final-redhat-2]

              at org.infinispan.jmx.ComponentsJmxRegistration.registerMBeans(ComponentsJmxRegistration.java:86) [infinispan-core-5.2.11.Final-redhat-2.jar:5.2.11.Final-redhat-2]

              ... 133 more