WebSphere Application Server - Re: Able to get access to the MBeanServer even with incorrect user

This is Interesting: Free IT Magazines  
Home > Archive > WebSphere Application Server > December 2005 > Re: Able to get access to the MBeanServer even with incorrect user





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Re: Able to get access to the MBeanServer even with incorrect user
Ken Hygh

2005-12-14, 5:59 pm

fd97616@yahoo.com wrote:

>hello,
>I have an application that interacts with the MBeanServer.
>
>I have global Security turned on.
>
>For some reason, i am able to get a connection to the MBeanServer (ie getMBeanServer returns successfully) even when i provide a Wrong User ID and Password.
>
>I dont know how to turn on JMX authenication on WAS.
>
>could some one point to the steps that i need to follow to enable JMX authentication so that the connection to the MBeanServer properly checks for user id/password authenication.
>
>any help in this regard is appreciated.
>
>thanks.
>
>
>

You can get a connection, but you can't execute anything on an MBean.
You CAN list the MBeans, though.

I opened a PMR on this, and got told this is Working As Designed and
they refused to see it as a problem.
Ken
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com