aspose file tools*
The moose likes JBoss/WildFly and the fly likes Secure jmx-console in JBoss 4.0.3 Big Moose Saloon
  Search | Java FAQ | Recent Topics | Flagged Topics | Hot Topics | Zero Replies
Register / Login
JavaRanch » Java Forums » Products » JBoss/WildFly
Bookmark "Secure jmx-console in JBoss 4.0.3" Watch "Secure jmx-console in JBoss 4.0.3" New topic
Author

Secure jmx-console in JBoss 4.0.3

Dirk Schnelle
Greenhorn

Joined: Jul 07, 2004
Posts: 21
Hi,

i try to secure my jmx-console and followed the instrcutions given at
http://www.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole

Unfortunately this does not work. I get an error message:


Someone an idea how to make it right?

/dirk
Reid M. Pinchback
Ranch Hand

Joined: Jan 25, 2002
Posts: 775
Which of the two approaches did you try?


Reid - SCJP2 (April 2002)
Dirk Schnelle
Greenhorn

Joined: Jul 07, 2004
Posts: 21
What do you mean by twoapproaches?

username/password and own jaas domain?

I tried it with username/password.

/dirk
Reid M. Pinchback
Ranch Hand

Joined: Jan 25, 2002
Posts: 775
This definitely sounds like JAAS isn't picking up on your changes. You saw the comments in the "Update for 4.0.2"? I haven't tried to secure jmx-console before, but I have used the same JAAS mechanisms it uses, and usually the problem boils down to something being out of sync in jboss-web.xml or the login-config.xml file.
Dirk Schnelle
Greenhorn

Joined: Jul 07, 2004
Posts: 21
Yes, I saw them, and I event tried it with a copy of the user and roles properties files in the WEB-INF/classes folder.

I do not see any strange things in the xml files.

Here is a snippet

jboss-web.xml


web.xml


login-config.xml


Looks OK to me. Did I miss something?

/dirk
Premil Jacob
Ranch Hand

Joined: Sep 10, 2004
Posts: 30
You missed out the login-config in the web.xml

<login-config>
<auth-method>BASIC</auth-method>
<realm-name>testrealm</realm-name>
</login-config>


Thanks,<br />Premil<br /> <br />SCJP 1.4
Dirk Schnelle
Greenhorn

Joined: Jul 07, 2004
Posts: 21
Yes!!!

That's it!

This one was missing in the web.xml. Unfortunately it not noted in the wiki. Someone should update the wiki at that point.

Thanks a lot.

/dirk
Jenova Kasan
Greenhorn

Joined: Feb 08, 2006
Posts: 1
Yes, after adding in the login-config to web.xml I get the log-in to work.

Now when i shutdown jboss, start it up again and access the jmx-console it does not prompt me to log-in instead gives me access to the jmx-console.

Should there be a log-in prompt here and is there anyway to enable it?

I do get a login prompt when i restart the computer.

Thanks, J.
 
I agree. Here's the link: http://aspose.com/file-tools
 
subject: Secure jmx-console in JBoss 4.0.3