security - JMX: How can I support both secure and insecure access at the same time (different URLs) -
i've been asked back upwards 2 urls jmx access our server:
a secure 1 (service:jmx:rmi://localhost/jndi/rmi://localhost:2020/jmxrmi) insecure one: (service:jmx:rmi://localhost/jndi/rmi://localhost:2020/insecure-jmxrmi)
the insecure 1 demo purposes - no won't used during production.
i can create custom connectorserver /jmxrmi , provide interceptor utilize our security mechanism verify credentials. if create vanilla sec connectorserver (no 'env' properties), however, using jconsole -debug access tries secure access, , puts dialog failing, asking if want seek insecurely.
the docs i've read oracle/sun indicate can disable password auth , ssl using couple of command-line -d switches. not mess /jmxrmi secure access?
how back upwards both secure , non-secure connections @ same time? note don't need them using same url, of course.
thanks!
this tough one. when disable auth , ssl per jvm.
the jmxrmp protocol can not distinguish between secured , non-secured connection. either set security , used or not. think best shot using custom connectorserver , set messages jconsole produces.
security rmi jmx
No comments:
Post a Comment