I've deployed a stand alone Java application and have enabled JMX using the -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authentication=false -Dcom.sun.management.jmxremote.ssl=false command line options. Right now I can successfully connect to the JVM using JConsole. I'd like, however, to enable username/passwords in order to make monitoring and controlling via JConsole a bit more secure. Per Sun documents it would appear that I need to:
1) Remove the -Dcom.sun.management.jmxremote.authenticate=false system variable (it defaults to true)
2) Rename the <JRE_HOME>/lib/management/jmxremote.password.template to <JRE_HOME>/lib/management/jmxremote.password and verify the <JRE_HOME>/lib/management/jmxremote.access files in order to enable user authentication.
3) Secure both the jmxremote.password and jmxremote.access by removing the suggested Windows permissions.
However, after making these changes and restarting the application I can still connect using JConsole from a different computer without being required to enter a username/password.
What do I need to do differently?
Tried using both JDK 1.5.0_14 and JRE 1.6.0_11 on Windows XP.