[jboss-jira] [JBoss JIRA] Created: (JBAS-8159) Secure jmx-remoting.sar

Thu Jul 8 11:30:46 EDT 2010

Secure jmx-remoting.sar
-----------------------

                 Key: JBAS-8159
                 URL: https://jira.jboss.org/browse/JBAS-8159
             Project: JBoss Application Server
          Issue Type: Feature Request
      Security Level: Public (Everyone can see)
          Components: JMX
    Affects Versions: JBossAS-5.1.0.GA
         Environment: JBossAS 5.1.0 GA
            Reporter: Xavier MOGHRABI
            Assignee: Dimitris Andreadis

JBossAS 5.1.0 GA provides jmx-remoting.sar compliant to JSR 160. Unfortunately the service is not secured and doesn't provide any way to secure it.

However the JMX API provides several mechanisms allowing authentication and authorization. Authentication can easily done against a login-module.

A forwarder can be implemented to extend the authorization against a role based mechanism.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira