JBoss 4 RMIAdaptor Security Configuration

[csamguy]

Hi All,

I want to manage JBoss using management consoles such as MC4J. However, I want to do this in a secure way, using SSL and password based authentication, as I have my custom MBeans in the JBoss MBean Server.

How can I configure RMIAdaptor to use SSL and have password based authentication? I have googled a lot and could not find anything relating to this. Can someone please direct me to a link / article that shows how to do this?

Thanks in advance.

[ckaushalya]

Hi Jaxx,

You can write a new login module in the login-config.xml (for SSL Authentication & Authorization) and use it as the securit interceptor defined in jmx-invoker-service.xml.

From jmx-invoker-service.xml -

<interceptors>
<!-- Uncomment to require authenticated users -->
 <interceptor code="org.jboss.jmx.connector.invoker.AuthenticationInterceptor" securityDomain="java:/jaas/jmx-rmi-adaptor"/>
<!-- Interceptor that deals with non-serializable results -->
 <interceptor code="org.jboss.jmx.connector.invoker.SerializableInterceptor" policyClass="StripModelMBeanInfoPolicy"/>
</interceptors>