[Installation, Configuration & DEPLOYMENT] - invoke operations in jmx console return 403
by mrwease
I have secured the JMX Console using SSL and LDAP. I am able to successfully login to the JMX console and view everything but I get a 403 whenever I try any invoke operations. I see nothing in the logs other than the 403 logged in the access log. I am using jboss 4.2.2 but have been able to reproduce this on 4.2.3 and 5.0.0. Would someone please point me in the right direction? Here is the filter from my web.xml that has the mapping for JmxOpsAccessControlFilter.
<filter-name>JmxOpsAccessControlFilter</filter-name>
<filter-class>org.jboss.jmx.adaptor.html.JMXOpsAccessControlFilter</filter-class>
<init-param>
<param-name>updateAttributes</param-name>
<param-value>UpdateAttributeRole</param-value>
Comma-delimited Roles that define the JMX Operation denoting updation of Attributes
</init-param>
<init-param>
<param-name>invokeOp</param-name>
<param-value>InvokeOpRole</param-value>
Comma-delimited Roles that define the JMX Operation denoting Invocation of Operations
</init-param>
<filter-mapping>
<filter-name>JmxOpsAccessControlFilter</filter-name>
<servlet-name>HtmlAdaptor</servlet-name>
</filter-mapping>
Thanks in advance,
Keith
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4199837#4199837
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4199837
17 years, 3 months
[Microcontainer] - Re: New resource adapter deployers (JCA)
by alesj
"jesper.pedersen" wrote :
| 3) - is done if ra.xml::metadata-complete == false.
|
This should just plug-in into AnnotationEnvironment.
See
(Filtered)AnnotationEnvironmentDeployer in JBossAS's metadata-deployer-jboss-beans.xml.
"jesper.pedersen" wrote :
| One question is if I need a second deployer in the PRE_REAL stage that adds the dependencies to other deployment units as defined in jboss-ra.xml
| if we create annotations for describing the dependencies - e.g. RaDependencyDeployer. Otherwise this could go in the DESCRIBE phase.
|
I don't understand what you're trying to do here.
"jesper.pedersen" wrote :
| what are the best class to extend from in each deployer (AbstractVFSParsingDeployer, AbstractSimpleRealDeployer, ...) ? There are various different solutions to each of the stages.
|
It depends. :-)
Go to deployers project and check the existing Deployer sub-classes hierarchy.
Most of them have meaningful names and there's a lot of examples/tests behind them.
"jesper.pedersen" wrote :
| btw - is there any API documentation online that I could link my JavaDoc against ?
|
Unfortunately not.
I'm currently trying to get at least the separate MC downloads up on the open.
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4199827#4199827
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4199827
17 years, 3 months
[Microcontainer] - New resource adapter deployers (JCA)
by jesper.pedersen
I'm currently looking into implementing the new resource adapter deployers for JCA 1.6 (JBJCA-35).
The chain must be able to handle the following
1) ra.xml
2) jboss-ra.xml
3) JCA 1.6 annotated classes
from within a .RAR archive.
1) and 3) are specified by the JCA specification and 2) is our specific deployment descriptor.
This means that we need something like
1) RaXmlParsingDeployer (PARSE)
2) JBossRaXmlParsingDeployer (PARSE)
3) RaAnnotationScannerDeployer (POST_CLASSLOADER)
4) RaMergeMetadataDeployer (PRE_REAL)
5) RaDeployer (REAL)
1) and 2) - the metadata is defined in the JBMETA project.
3) - is done if ra.xml::metadata-complete == false.
4) - merges the metadata between the previous three deployers as we must make sure to override information from 3)
5) - creates the BeanMetaData
One question is if I need a second deployer in the PRE_REAL stage that adds the dependencies to other deployment units as defined in jboss-ra.xml
if we create annotations for describing the dependencies - e.g. RaDependencyDeployer. Otherwise this could go in the DESCRIBE phase.
If this sounds correct - what are the best class to extend from in each deployer (AbstractVFSParsingDeployer, AbstractSimpleRealDeployer, ...) ? There are various different solutions to each of the stages.
btw - is there any API documentation online that I could link my JavaDoc against ?
Ideas, comments or flames welcomed :)
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4199822#4199822
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4199822
17 years, 3 months
[JBoss Messaging] - Re: JBM Topic Pub-Sub
by bdaye42
I would like to as a follow on question relating to durable subscriptions. If a durable subscription is created:
MessageConsumer consumer = session.createDurableSubscriber(Topic topic, String name);
The whole point of using durable subscribers is so that messages can be received while the consumer is not connected. Let us say the consumer above is created in a method and the reference ceases to exist after. The consumer can still be notified of any messages published to its topic. However, how can that consumer be closed and unsubscribed? If you attempt to unsubscribe the durable subscriber:
session.unsubscribe(String name);
an IllegalStateException will be thrown per the JMS 1.1 spec:
"It is erroneous for a client to delete a durable subscription while there is an active MessageConsumer or TopicSubscriber for the subscription, or while a consumed message is part of a pending transaction or has not been acknowledged in the session. "
How then can durable subscriptions ever be deleted? I understand if you create a new one with the same name and a new topic, it will effectively delete the old one. Is this the only option?
View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4199816#4199816
Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4199816
17 years, 3 months