title: Jboss EAP 6.3: HQ119031: Unable to validate user: USERNAME
body: <p>I'm trying to configure the JBoss EAP 6.3 JMS-Bridge to work in secured environment. It seems that it not possible at all.</p>
  
  <p>My configuraiton consists of two (equal) JBoss EAP installations: call them provider and consumer. Provider defines a queue and consumer uses a netty connection factory to connect it to a local queue. The configuration works fine if security is disabled on both sides using the </p>
  
  <pre><code>&lt;security-enabled&gt;false&lt;/security-enabled&gt;
  </code></pre>
  
  <p>As soon as I activate security, the consumer is not able to construct the bridge. I'm using the same security domain on both sides by specifying:</p>
  
  <pre><code>&lt;security-domain&gt;myDomain&lt;/security-domain&gt;
  </code></pre>
  
  <p>I also tried to specify a username/password combination during bridge construction:</p>
  
  <pre><code>&lt;jms-bridge name="..."&gt;
     &lt;source&gt;
        &lt;connection-factory name="RemoteConnectionFactory" /&gt;
        &lt;user&gt;USERNAME&lt;/user&gt;
        &lt;password&gt;secret&lt;/password&gt;
        &lt;destination&gt;jms/topic/whatever&lt;/destination&gt; 
     &lt;/source&gt;
  ...
  &lt;/jms-bridge&gt;
  </code></pre>
  
  <p>In case I don't specify the username/password, the behaviour described in <a href="https://stackoverflow.com/questions/26420490/jboss-eap-6-3-hq119031-unable-to-validate-user-null">Jboss EAP 6.3: HQ119031: Unable to validate user: null</a> is observed. In case I specify the username in the source configuration of the JMS-Bridge, the exception is the same, but I see the specified USERNAME instead of null:</p>
  
  <pre><code>ERROR HQ122010: Failed to connect JMS Bridge: javax.jms.SecurityException: HQ119031: Unable to validate user: USERNAME]
      at org.hornetq.core.protocol.core.impl.ChannelImpl.sendBlocking(ChannelImpl.java:399)
      ....
      ....
  Caused by: HornetQException[errorType=SECURITY_EXCEPTION message=HQ119031: Unable to validate user: USERNAME]
  </code></pre>
  
  <p>The security-domain is also configured for usage with EJB3 RMI and the USERNAME is a valid user.</p>
  
  <p>Am I missing something? Disabling security for messaging is not an option for us. So if there are any workarounds, please help!</p>
  
  <p>Kind regards,</p>
  
  <p>Simon</p>