[Bug 55931] Security: Tomcat7 opens 2 additional random ports that listen for all IPs when JMX is enabled

[bu...@apache.org]

https://issues.apache.org/bugzilla/show_bug.cgi?id=55931

--- Comment #2 from Michael <mi...@hotmail.com> ---
Dear Mark,
What do you mean by “JMXLifecylceListener in JMXREmote.jar”?
I configured JmxRemoteLifecycleListener from catalina-jmx-remote.jar. 

Do you mean this class or something else?

Regarding JMX 
You absolutely correct: Java is opened 3 ports when JMX is configured and not
Tomcat.

When I configured JmxRemoteLifecycleListener I can control over 2 ports:
rmiRegistryPortPlatform and rmiServerPortPlatform

My questions:
1)    What is 3-d port opened by Java? Why it is not used when connecting with
JConsole?
2)    Why it is not controlled by JmxRemoteLifecycleListener? 
Can it be controlled by JmxRemoteLifecycleListener? Is it enhancement request
or it is not possible?

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org