|
Home > Archive > WebSphere Application Server > January 2006 > Securing access to JMXserver
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Securing access to JMXserver
|
|
|
| Hi,
I am using WS 6.0. I have enabled global security and under JMX connector for SOAP and RMI I have set the custom properties "username", "password" and "securityEnabled". But still I am able to connect and retrieve the MBeans.
How will is require the username and password while connecting via both SOAP and RMI. Please help.
Regards,
Satish
| |
| Ken Hygh 2006-01-24, 2:50 am |
| satish.kulkarni@gmail.com wrote:
>Hi,
>I am using WS 6.0. I have enabled global security and under JMX connector for SOAP and RMI I have set the custom properties "username", "password" and "securityEnabled". But still I am able to connect and retrieve the MBeans.
>How will is require the username and password while connecting via both SOAP and RMI. Please help.
>
>Regards,
>Satish
>
>
You can do a queryNames(), but you can't execute anything on the MBeans
returned.
Ken
| |
|
| > satish.kulkarni@gmail.com wrote:
>
> and under JMX connector for SOAP and RMI I have set
> the custom properties "username", "password" and
> "securityEnabled". But still I am able to connect and
> retrieve the MBeans.
> connecting via both SOAP and RMI. Please help.
> You can do a queryNames(), but you can't execute
> anything on the MBeans
> returned.
>
> Ken
Hi,
Thanks for the response. I guess my question was not clear in the earlier email.
I have enabled security. So any Java client trying to make a JMX connection needs to provide the correct username and password before getting all the MBeans. But even though I have setup the security I am able to connect and retrieve all the MBeans in the
server. How can I test if my security setting are correct?
Regards,
Satish
| |
| Ken Hygh 2006-01-24, 9:06 pm |
|
>Hi,
>Thanks for the response. I guess my question was not clear in the earlier email.
>I have enabled security. So any Java client trying to make a JMX connection needs to provide the correct username and password before getting all the MBeans. But even though I have setup the security I am able to connect and retrieve all the MBeans in th
e server. How can I test if my security setting are correct?
>
>Regards,
>Satish
>
>
Satish,
Your question was worded just fine.
I opened a PMR with IBM because of the following failure:
1) enable security
2) try to connect to the JMX server without a password. Cannot get an
adminClient object.
3) try to connect to JMX with a bogus userid & password. Can get an
adminClient object, AND can get all the MBeans using queryNames().
4) Open PMR - which got rejected because this is "working as designed".
Fight with IBM for 3 months, give up.
Soo.....open a PMR if you want and be prepared to fight :-)
Ken
|
|
|
|
|