JMX Invoker Service, twiddle and shutdown without jrmp invoker

[xmedeko]

Hello,

I am trying to slim and secure JBoss. Is it possible to change invoker for jmx-invoker-service.xml? Prefferably to use unified JBoss Remoting (we use it for EJBs anyway) or HTTP invoker?

Or is it possible to have working twiddle.sh and shutdown.sh without JMX Invoker Service?

Thanks

(I am searching the web but cannot find the answer).

[xmedeko]

Well, I run JBoss with -Djboss.platform.mbeanserver and can access MBeans from JConsole or some other JMX commandline tool, like jmxterm.

Is is a good idea to access JMX this way from the security point of view? I do not know much about JMX, I expect JBoss to behave like any other JRE 6 Java application - the JMX is accessible from localhost only.

If it is ok to expose MBeans to JConsole, why it is not the default JBoss configuration?

Thanks