WebSphere Application Server - Securing access to JMXserver

This is Interesting: Free IT Magazines  
Home > Archive > WebSphere Application Server > January 2006 > Securing access to JMXserver





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Securing access to JMXserver

2006-01-23, 8:49 pm

Hi,
I am using WS 6.0. I have enabled global security and under JMX connector for SOAP and RMI I have set the custom properties "username", "password" and "securityEnabled". But still I am able to connect and retrieve the MBeans.
How will is require the username and password while connecting via both SOAP and RMI. Please help.

Regards,
Satish
Ken Hygh

2006-01-24, 2:50 am

satish.kulkarni@gmail.com wrote:

>Hi,
>I am using WS 6.0. I have enabled global security and under JMX connector for SOAP and RMI I have set the custom properties "username", "password" and "securityEnabled". But still I am able to connect and retrieve the MBeans.
>How will is require the username and password while connecting via both SOAP and RMI. Please help.
>
>Regards,
>Satish
>
>

You can do a queryNames(), but you can't execute anything on the MBeans
returned.

Ken

2006-01-24, 6:25 pm

> satish.kulkarni@gmail.com wrote:
>
> and under JMX connector for SOAP and RMI I have set
> the custom properties "username", "password" and
> "securityEnabled". But still I am able to connect and
> retrieve the MBeans.
> connecting via both SOAP and RMI. Please help.
> You can do a queryNames(), but you can't execute
> anything on the MBeans
> returned.
>
> Ken



Hi,
Thanks for the response. I guess my question was not clear in the earlier email.
I have enabled security. So any Java client trying to make a JMX connection needs to provide the correct username and password before getting all the MBeans. But even though I have setup the security I am able to connect and retrieve all the MBeans in the
server. How can I test if my security setting are correct?

Regards,
Satish
Ken Hygh

2006-01-24, 9:06 pm


>Hi,
>Thanks for the response. I guess my question was not clear in the earlier email.
>I have enabled security. So any Java client trying to make a JMX connection needs to provide the correct username and password before getting all the MBeans. But even though I have setup the security I am able to connect and retrieve all the MBeans in th

e server. How can I test if my security setting are correct?
>
>Regards,
>Satish
>
>

Satish,
Your question was worded just fine.

I opened a PMR with IBM because of the following failure:

1) enable security
2) try to connect to the JMX server without a password. Cannot get an
adminClient object.
3) try to connect to JMX with a bogus userid & password. Can get an
adminClient object, AND can get all the MBeans using queryNames().
4) Open PMR - which got rejected because this is "working as designed".
Fight with IBM for 3 months, give up.

Soo.....open a PMR if you want and be prepared to fight :-)

Ken
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com