Default JBoss Security problem

[mburke1963]

I installed JBoss 4 & it appears to be working, but I can't get to any pages because it prompts for a user-password. How do I shut this off?

[darranl]

Which version of JBoss have you installed (There are loads of releases that start with 4!)?

How did you install it? Did you unzip an archive or did you use the installer?

Have you installed any other application servers recently? The majority of times I have seen users with this problem they have installed another application server that is also listening on port 8080 and it is that application server prompting for a password and not JBoss.

[mburke1963]

Hi,
I am using 4.0. I just unzipped it. Where is the installer? I could not find any way to configure the server.

The only other thing I have installed is Oracle 10g Database, listening on 1521.

[darranl]

Ok we are getting a little bit closer, however 4.0 is still not enough information for a version - there should be one more digit (0, 1 or 2) and possibley some letters and a digit.

The installer is only available with 4.0.3, I just wanted to check if you were using the installer as that gives you an option to secure the consoles.

Can you check the file {jboss.home}/server/default/log/server.log for any stack traces when the server starts.

[darranl]

"darranl" wrote:
there should be one more digit (0, 1 or 2)

Sorry should have been (0,1,2 or 3).

[mburke1963]

The file name is jboss-4.0.0RC1.zip.

There must be a config file somewhere to set security, port number and so on. I can't find it in the JBoss docs.

[darranl]

Ok unless you can justify why you are using that version stop using it and download a later release.

JBoss 4.0.0 is the very first production release of the 4.0.x series, there have been quite a lot of fixes / enhancemens since then.

The RC1 stands for Release Candidate 1.

Release candidate 1 was not considered suitable for production use so there was a release candidate 2 before the production release of JBoss 4.0.0 was made.

[mburke1963]

Well, I was trying different versions hoping I could work around the problem. I get the same problem with the jboss-4.0.2 build.

I can't get into the jboss admin programs either. I can run Tomcat stand-alone with no problem.

[darranl]

JBoss is not secured by default, the only exception to this is if you use the new installer which has an option to secure JBoss.

When someone replies to your questions and asks you to do something please make sure it is clear in your subsequent posts if you have done this, I asked you to check the server log for any stack traces. (There may be some DEBUG stack traces so you just need to look for ones at other levels).

What port do you configure Tomcat to use? What URL do you connect to Tomcat with?

What URL are you using to connect to JBoss?

[callumhaig]

If Oracle 10g is like the installation of 9.2 I use at work, its probably using port 8080. You could either switch that off or set Tomcat to listen on another port by modifying ${JBOSS_HOME}/server/default/deploy/jbossweb-tomcat55.sar/server.xml.

Regards,
Callum.

[callumhaig]

I just found this link (haven't checked it out). It might help you to disable Oracle's XDB server, or change its port usage:

http://www.togaware.com/linux/survivor/XDB.shtml

Cheers,
Callum.