Mbean with custom authentification / authorization for my ow

[jaunedeau]

Hi,

I've found many information about aux to secure the JMX access in JBoss, but I did not really understand what is the "good" way to have my own MBeans, registered from JBoss (they access EJBs and make some informations -stats, status- aviable to the jconsole), and have a authenticated access to them (I'd like to use my user accounts as login / password, and aviable functionnalities of my MBeans will depend on the user level in my app settings).

Is there any sample / tutorial about how to do that ?


Regards,
John.

[genman]

For remote access, you'd configure the security for the console.
http://wiki.jboss.org/wiki/Wiki.jsp?page=HowDoISecureTheJMXConnection

This will authenticate a remote connection, take "username+password" and create a principal.

For fine-grained authentication, enable this interceptor:
http://jsourcery.com/api/sourceforge/jboss/4.0.4/org/jboss/jmx/connector/invoker/AuthorizationInterceptor.html
Which, once configured, can instantiate an object and call this method:

 public void authorize( Principal caller, Subject subject, String objectname,String opname)

I don't believe there's a tutorial...

[genman]

Er, not console I mean RMI adapter.

Anyway, take it step by step... first get login to work, then add the interceptor.