[jboss-jira] [JBoss JIRA] Commented: (JBAS-8159) Secure jmx-remoting.sar
[
https://jira.jboss.org/browse/JBAS-8159?page=com.atlassian.jira.plugin.sy...
]
Scott Marlow commented on JBAS-8159:
------------------------------------
Thanks for the 5.x patch, that will be useful to others also using 5.x. The JSR-160
connector can be secured already in 6.x (see umbrella jira JBAS-7818), but if you have
improvements (for AS 6) to what we did, that is always welcome. What do think?
Secure jmx-remoting.sar
-----------------------
Key: JBAS-8159
URL: https://jira.jboss.org/browse/JBAS-8159
Project: JBoss Application Server
Issue Type: Feature Request
Security Level: Public(Everyone can see)
Components: JMX
Affects Versions: JBossAS-5.1.0.GA
Environment: JBossAS 5.1.0 GA
Reporter: Xavier MOGHRABI
Assignee: Scott Marlow
Attachments: jboss-service.xml, jbossas-jmx-remoting-src.jar
JBossAS 5.1.0 GA provides jmx-remoting.sar compliant to JSR 160. Unfortunately the
service is not secured and doesn't provide any way to secure it.
However the JMX API provides several mechanisms allowing authentication and
authorization. Authentication can easily done against a login-module.
A forwarder can be implemented to extend the authorization against a role based
mechanism.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira