[jboss-jira] [JBoss JIRA] Updated: (JBAS-8159) Secure jmx-remoting.sar
[
https://jira.jboss.org/browse/JBAS-8159?page=com.atlassian.jira.plugin.sy...
]
Xavier MOGHRABI updated JBAS-8159:
----------------------------------
Attachment: jbossas-jmx-remoting-src.jar
jboss-service.xml
I've attached the source code I've modified from jmx-remoting.sar to secure the
JMX remoting access based on the jmx-console login-module and a custom role based
authorization mechanism using the JBossAdmin role.
I'll be really glad to see that feature integrated in the next releases of JBoss since
by this way jmx-remoting.sar is much more adaptable than the standard JVM JMX remoting
access.
Secure jmx-remoting.sar
-----------------------
Key: JBAS-8159
URL: https://jira.jboss.org/browse/JBAS-8159
Project: JBoss Application Server
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: JMX
Affects Versions: JBossAS-5.1.0.GA
Environment: JBossAS 5.1.0 GA
Reporter: Xavier MOGHRABI
Assignee: Scott Marlow
Attachments: jboss-service.xml, jbossas-jmx-remoting-src.jar
JBossAS 5.1.0 GA provides jmx-remoting.sar compliant to JSR 160. Unfortunately the
service is not secured and doesn't provide any way to secure it.
However the JMX API provides several mechanisms allowing authentication and
authorization. Authentication can easily done against a login-module.
A forwarder can be implemented to extend the authorization against a role based
mechanism.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira