9:19 a.m.
Create a JMXAuthenticator implementation which uses our JAAS
------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public (Everyone can see)
Components: JMX
Reporter: David Lloyd
Assignee: Dimitris Andreadis
Fix For: JBossAS-6.0.0.M4
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
9:19 a.m.
New subject: [JBoss JIRA] Updated: (JBAS-7871) Create a JMXAuthenticator implementation which uses our JAAS
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
David Lloyd updated JBAS-7871:
------------------------------
Assignee: (was: Dimitris Andreadis)
Create a JMXAuthenticator implementation which uses our JAAS
------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Fix For: JBossAS-6.0.0.M4
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:21 a.m.
New subject: [JBoss JIRA] Updated: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
David Lloyd updated JBAS-7871:
------------------------------
Summary: Create a JMXAuthenticator implementation which uses our authentication stuff
(was: Create a JMXAuthenticator implementation which uses our JAAS)
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Fix For: JBossAS-6.0.0.M4
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
10:25 a.m.
New subject: [JBoss JIRA] Commented: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
Anil Saldhana commented on JBAS-7871:
-------------------------------------
Best is just use PicketBox Authentication. We are bringing in PicketBox into AS in a
couple of days.
http://community.jboss.org/wiki/PicketBoxAuthentication
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Fix For: JBossAS-6.0.0.M4
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
1:32 p.m.
New subject: [JBoss JIRA] Assigned: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
Scott Marlow reassigned JBAS-7871:
----------------------------------
Assignee: Scott Marlow
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Assignee: Scott Marlow
Fix For: JBossAS-6.0.0.M4
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:29 p.m.
New subject: [JBoss JIRA] Updated: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
Scott Marlow updated JBAS-7871:
-------------------------------
Attachment: jmxsecure.patch
cd into your as trunk and issue:
patch -p0 -i ./jmxsecure.patch
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Assignee: Scott Marlow
Fix For: JBossAS-6.0.0.M4
Attachments: jmxsecure.patch
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:40 p.m.
New subject: [JBoss JIRA] Commented: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
Scott Marlow commented on JBAS-7871:
------------------------------------
1. After building, open
build/target/jboss-6.0.0-SNAPSHOT/server/default/deploy/jmx-jboss-beans.xml and set the
following:
<property name="securityDomain">jmx-console</property>
<property
name="securityConfigFile">authentication.conf</property>
2. Create the authentication.conf file in
build/target/jboss-6.0.0-SNAPSHOT/server/default/conf:
<?xml version='1.0'?>
<policy xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:jboss:security-config:5.0"
xmlns="urn:jboss:security-config:5.0"
xmlns:jbxb="urn:jboss:security-config:5.0">
<!-- application-policy name is the security domain -->
<application-policy name = "jmx-console">
<authentication>
<login-module code =
"org.jboss.security.auth.spi.UsersRolesLoginModule"
flag = "required">
</login-module>
</authentication>
</application-policy>
</policy>
3. Then start the AS and get it to boot without error. Further instructions coming.
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Assignee: Scott Marlow
Fix For: JBossAS-6.0.0.M4
Attachments: jmxsecure.patch
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
6:49 p.m.
New subject: [JBoss JIRA] Updated: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
Scott Marlow updated JBAS-7871:
-------------------------------
Description:
jconsole instructions for accessing a secured AS:
1. Start AS with jmc connector security enabled.
2. Start jconsole (with adding any options).
3. In the jconsole gui, choose remote option button and enter remote url
"service:jmx:rmi:///jndi/rmi://localhost:1090/jmxrmi"
4. enter the userid and password and press connect.
Also verify that a bad userid/pw fails the challenge.
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Assignee: Scott Marlow
Fix For: JBossAS-6.0.0.M4
Attachments: jmxsecure.patch
jconsole instructions for accessing a secured AS:
1. Start AS with jmc connector security enabled.
2. Start jconsole (with adding any options).
3. In the jconsole gui, choose remote option button and enter remote url
"service:jmx:rmi:///jndi/rmi://localhost:1090/jmxrmi"
4. enter the userid and password and press connect.
Also verify that a bad userid/pw fails the challenge.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
7:06 p.m.
New subject: [JBoss JIRA] Updated: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
Anil Saldhana updated JBAS-7871:
--------------------------------
Attachment: anil_change.tar
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Assignee: Scott Marlow
Fix For: JBossAS-6.0.0.M4
Attachments: anil_change.tar, jmxsecure.patch
jconsole instructions for accessing a secured AS:
1. Start AS with jmc connector security enabled.
2. Start jconsole (with adding any options).
3. In the jconsole gui, choose remote option button and enter remote url
"service:jmx:rmi:///jndi/rmi://localhost:1090/jmxrmi"
4. enter the userid and password and press connect.
Also verify that a bad userid/pw fails the challenge.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
12:05 p.m.
New subject: [JBoss JIRA] Resolved: (JBAS-7871) Create a JMXAuthenticator implementation which uses our authentication stuff
[
https://jira.jboss.org/jira/browse/JBAS-7871?page=com.atlassian.jira.plug...
]
Scott Marlow resolved JBAS-7871.
--------------------------------
Resolution: Done
tested shutdown, twiddle, jconsole against a secured jmxconnector.
Steps to enable jmxconnector security:
1. Open deploy/jmx-jboss-beans.xml in an editor
2. Replace:
<!-- To enable authentication security checks, uncomment the following security
domain name -->
<!--UNCOMMENT THIS
<property name="securityDomain">jmx-console</property>
-->
With:
<!-- To enable authentication security checks, uncomment the following security
domain name -->
<property name="securityDomain">jmx-console</property>
The jmx-console security will be used (as specified in conf/login-config.xml)
Create a JMXAuthenticator implementation which uses our
authentication stuff
----------------------------------------------------------------------------
Key: JBAS-7871
URL: https://jira.jboss.org/jira/browse/JBAS-7871
Project: JBoss Application Server
Issue Type: Sub-task
Security Level: Public(Everyone can see)
Components: JMX
Reporter: David Lloyd
Assignee: Scott Marlow
Fix For: JBossAS-6.0.0.M4
Attachments: anil_change.tar, jmxsecure.patch
jconsole instructions for accessing a secured AS:
1. Start AS with jmc connector security enabled.
2. Start jconsole (with adding any options).
3. In the jconsole gui, choose remote option button and enter remote url
"service:jmx:rmi:///jndi/rmi://localhost:1090/jmxrmi"
4. enter the userid and password and press connect.
Also verify that a bad userid/pw fails the challenge.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
5946
days inactive
5958
days old
9 comments
3 participants
participants (3)
-
Anil Saldhana (JIRA) -
David Lloyd (JIRA)
-
Scott Marlow (JIRA)