You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@geode.apache.org by Dinesh Akhand <di...@amdocs.com> on 2017/07/14 12:00:02 UTC

Need to enable authentication in Locator JMX

Hi Team,

I need to enable the JMX authentication in geode for clients like pulse . could you please suggest what is correct procedure.

I did the below things:
JMX is enabled:

jmx-manager-start=true
jmx-manager=true

Add entry
Locator.properties:

jmx-manager-password-file=/users/xpiwrk1/GemFire/Server/properties/jmxremote.password     // permission is 400
jmx-manager-access-file=/users/xpiwrk1/GemFire/Server/properties/jmxremote.access


cat jmxremote.access
admin readwrite


cat jmxremote.password
admin admin

I am getting below exception in one of JVM:

Exception in thread "main" java.lang.StackOverflowError
               at java.security.AccessController.doPrivileged(Native Method)
               at sun.rmi.transport.tcp.TCPEndpoint.getHostnameProperty(TCPEndpoint.java:97)
               at sun.rmi.transport.tcp.TCPEndpoint.resampleLocalHost(TCPEndpoint.java:256)
               at sun.rmi.transport.tcp.TCPEndpoint.getLocalEndpoint(TCPEndpoint.java:201)
               at sun.rmi.transport.tcp.TCPEndpoint.getOutboundTransport(TCPEndpoint.java:368)
               at sun.rmi.transport.tcp.TCPEndpoint.getChannel(TCPEndpoint.java:418)
               at sun.rmi.transport.LiveRef.getChannel(LiveRef.java:152)
               at sun.rmi.server.UnicastRef.newCall(UnicastRef.java:342)
               at sun.rmi.registry.RegistryImpl_Stub.lookup(Unknown Source)
               at com.sun.jndi.rmi.registry.RegistryContext.lookup(RegistryContext.java:118)
               at com.sun.jndi.toolkit.url.GenericURLContext.lookup(GenericURLContext.java:205)
               at javax.naming.InitialContext.lookup(InitialContext.java:417)
               at javax.management.remote.rmi.RMIConnector.findRMIServerJNDI(RMIConnector.java:1955)
               at javax.management.remote.rmi.RMIConnector.findRMIServer(RMIConnector.java:1922)
               at javax.management.remote.rmi.RMIConnector.connect(RMIConnector.java:287)
               at javax.management.remote.JMXConnectorFactory.connect(JMXConnectorFactory.java:270)
               at org.apache.geode.management.internal.cli.shell.JmxOperationInvoker.<init>(JmxOperationInvoker.java:149)
               at org.apache.geode.management.internal.cli.commands.ShellCommands.jmxConnect(ShellCommands.java:347)
               at org.apache.geode.management.internal.cli.commands.ShellCommands.jmxConnect(ShellCommands.java:372)

Please suggest.

After that I want to enable org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder for password encoding & decoding in JMX . please guide.

Thanks,
Dinesh Akhand

This message and the information contained herein is proprietary and confidential and subject to the Amdocs policy statement,

you may review at https://www.amdocs.com/about/email-disclaimer <https://www.amdocs.com/about/email-disclaimer>

Re: Need to enable authentication in Locator JMX

Posted by Jinmei Liao <ji...@pivotal.io>.
Hi, Dinesh, which version of Geode you are using? If you are using the
latest one. By simply specify a security-manager in your locator.properties
will turn on the authentication for jmx. Please see the instruction on this
page:

http://geode.apache.org/docs/guide/11/managing/security/enable_security.html
https://cwiki.apache.org/confluence/display/GEODE/Using+Custom+SecurityManager

On Fri, Jul 14, 2017 at 5:00 AM, Dinesh Akhand <di...@amdocs.com> wrote:

> Hi Team,
>
> I need to enable the JMX authentication in geode for clients like pulse .
> could you please suggest what is correct procedure.
>
> I did the below things:
> JMX is enabled:
>
> jmx-manager-start=true
> jmx-manager=true
>
> Add entry
> Locator.properties:
>
> jmx-manager-password-file=/users/xpiwrk1/GemFire/Server/properties/jmxremote.password
>    // permission is 400
> jmx-manager-access-file=/users/xpiwrk1/GemFire/Server/
> properties/jmxremote.access
>
>
> cat jmxremote.access
> admin readwrite
>
>
> cat jmxremote.password
> admin admin
>
> I am getting below exception in one of JVM:
>
> Exception in thread "main" java.lang.StackOverflowError
>                at java.security.AccessController.doPrivileged(Native
> Method)
>                at sun.rmi.transport.tcp.TCPEndpoint.getHostnameProperty(
> TCPEndpoint.java:97)
>                at sun.rmi.transport.tcp.TCPEndpoint.resampleLocalHost(
> TCPEndpoint.java:256)
>                at sun.rmi.transport.tcp.TCPEndpoint.getLocalEndpoint(
> TCPEndpoint.java:201)
>                at sun.rmi.transport.tcp.TCPEndpoint.getOutboundTransport(
> TCPEndpoint.java:368)
>                at sun.rmi.transport.tcp.TCPEndpoint.getChannel(
> TCPEndpoint.java:418)
>                at sun.rmi.transport.LiveRef.getChannel(LiveRef.java:152)
>                at sun.rmi.server.UnicastRef.newCall(UnicastRef.java:342)
>                at sun.rmi.registry.RegistryImpl_Stub.lookup(Unknown
> Source)
>                at com.sun.jndi.rmi.registry.RegistryContext.lookup(
> RegistryContext.java:118)
>                at com.sun.jndi.toolkit.url.GenericURLContext.lookup(
> GenericURLContext.java:205)
>                at javax.naming.InitialContext.lookup(InitialContext.java:
> 417)
>                at javax.management.remote.rmi.RMIConnector.
> findRMIServerJNDI(RMIConnector.java:1955)
>                at javax.management.remote.rmi.RMIConnector.findRMIServer(
> RMIConnector.java:1922)
>                at javax.management.remote.rmi.RMIConnector.connect(
> RMIConnector.java:287)
>                at javax.management.remote.JMXConnectorFactory.connect(
> JMXConnectorFactory.java:270)
>                at org.apache.geode.management.internal.cli.shell.
> JmxOperationInvoker.<init>(JmxOperationInvoker.java:149)
>                at org.apache.geode.management.internal.cli.commands.
> ShellCommands.jmxConnect(ShellCommands.java:347)
>                at org.apache.geode.management.internal.cli.commands.
> ShellCommands.jmxConnect(ShellCommands.java:372)
>
> Please suggest.
>
> After that I want to enable org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder
> for password encoding & decoding in JMX . please guide.
>
> Thanks,
> Dinesh Akhand
>
> This message and the information contained herein is proprietary and
> confidential and subject to the Amdocs policy statement,
>
> you may review at https://www.amdocs.com/about/email-disclaimer <
> https://www.amdocs.com/about/email-disclaimer>
>



-- 
Cheers

Jinmei