ActiveMQ supports pluggable JAAS modules that handle the authentication of incoming requests. ActiveMQ comes preloaded with a few JAAS modules, none of which supports MongoDB as the backend repository of the authentication data.
The latest version of Jolokia – 1.2.1 running in the latest version of Karaf – 3.0.1 fails with an HTTP 403 error. The issue applies only when the jolokia-osgi bundle which depends on the OSGi HTTP service is deployed. The master branch in Jolokia which is not released yet contains a fix for this issue and introduces 2 new configuration properties specific to this.