[ https://issues.jboss.org/browse/REMJMX-74?page=com.atlassian.jira.plugin.... ] Darran Lofthouse commented on REMJMX-74: ---------------------------------------- Hello Rob unfortunately your comment is a little late due to time constraints we need this fixed and tagged yesterday ;-) The change you have made is correct, you do not have any credentials to use so you should not be setting them - I would recommend however you do revisit looking at supplying a callback handler at some point as that gives you an opportunity to prompt for a username and password if and only if it is actually required. One final point you may want to consider, the main reason we made this change was so that once access control was enabled and users had an option in the client to force authentication to disable local authentication - I have now added an option 'org.jboss.remoting-jmx.excluded-sasl-mechanisms' which if set on the environment with the value 'JBOSS-LOCAL-USER' will disable local authentication. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira