• Post Reply
  • Bookmark Topic Watch Topic
  • New Topic

Secure jmx-console in JBoss 4.0.3

 
Dirk Schnelle
Greenhorn
Posts: 21
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hi,

i try to secure my jmx-console and followed the instrcutions given at
http://www.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole

Unfortunately this does not work. I get an error message:


Someone an idea how to make it right?

/dirk
 
Reid M. Pinchback
Ranch Hand
Posts: 775
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Which of the two approaches did you try?
 
Dirk Schnelle
Greenhorn
Posts: 21
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
What do you mean by twoapproaches?

username/password and own jaas domain?

I tried it with username/password.

/dirk
 
Reid M. Pinchback
Ranch Hand
Posts: 775
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
This definitely sounds like JAAS isn't picking up on your changes. You saw the comments in the "Update for 4.0.2"? I haven't tried to secure jmx-console before, but I have used the same JAAS mechanisms it uses, and usually the problem boils down to something being out of sync in jboss-web.xml or the login-config.xml file.
 
Dirk Schnelle
Greenhorn
Posts: 21
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Yes, I saw them, and I event tried it with a copy of the user and roles properties files in the WEB-INF/classes folder.

I do not see any strange things in the xml files.

Here is a snippet

jboss-web.xml


web.xml


login-config.xml


Looks OK to me. Did I miss something?

/dirk
 
Premil Jacob
Ranch Hand
Posts: 30
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
You missed out the login-config in the web.xml

<login-config>
<auth-method>BASIC</auth-method>
<realm-name>testrealm</realm-name>
</login-config>
 
Dirk Schnelle
Greenhorn
Posts: 21
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Yes!!!

That's it!

This one was missing in the web.xml. Unfortunately it not noted in the wiki. Someone should update the wiki at that point.

Thanks a lot.

/dirk
 
Jenova Kasan
Greenhorn
Posts: 1
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Yes, after adding in the login-config to web.xml I get the log-in to work.

Now when i shutdown jboss, start it up again and access the jmx-console it does not prompt me to log-in instead gives me access to the jmx-console.

Should there be a log-in prompt here and is there anyway to enable it?

I do get a login prompt when i restart the computer.

Thanks, J.
 
  • Post Reply
  • Bookmark Topic Watch Topic
  • New Topic