0 Replies Latest reply on Feb 20, 2013 11:55 AM by aida.sp

    JMX configured with password and access files lets remote connections through JConsole without asking for user/pass

    aida.sp

      Hi,

       

      I'm working with a JBoss 5.1.0 GA with jmx configured so remote connections with JConsole can be made. The thing is that, when I configure the options required to use password and access files like in [1]  I try to connect again with JConsole to the remote process. Then the JConsole connects without a problem and without asking me for a user and password. My JAVA_OPTS related with jmx are:

       

      -Dcom.sun.management.jmxremote

      -Dcom.sun.management.jmxremote.port=1198

      -Dcom.sun.management.jmxremote.ssl=false

      -Dcom.sun.management.jmxremote.authenticate=true

      -Dcom.sun.management.jmxremote.password.file=$JMX_SECURITY_DIR/jmxremote.password

      -Dcom.sun.management.jmxremote.access.file=$JMX_SECURITY_DIR/jmxremote.access

       

      JBoss is realizing about the opts because if one of the files does not exist (jmxremote.password or jmxremote.acces) then an error occurs. The same happens when the password file has the wrong permissions (readonly), but despite of this JConsole is connecting without any authentication.

       

      I have read that if the connection is local user and password aren´t needed but my Jboss is running in a different machine from the one I try to connect with the JConsole.

       

       

      Any help would be appreciated. Thanks in advance.

       

        Aida.

       

       

      [1] http://docs.oracle.com/javase/1.5.0/docs/guide/management/agent.html#PasswordAccessFiles