You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by bu...@apache.org on 2011/04/26 11:29:44 UTC

DO NOT REPLY [Bug 51119] New: extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

           Summary: extras - JmxRemoteLifecycleListener does not support
                    JAAS based authentication and authorisation
           Product: Tomcat 6
           Version: 6.0.32
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P2
         Component: Catalina
        AssignedTo: dev@tomcat.apache.org
        ReportedBy: neil.laurance@gmail.com


(Also true in Tomcat 7)

The JmxRemoteLifecycleListener does not support JAAS based authentication.

That is, when authentication is required, it only supports file based
authentication.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51119] extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

--- Comment #4 from Neil laurance <ne...@gmail.com> 2011-04-26 05:40:49 EDT ---
Properties to verify this is working:

-Dcom.sun.management.jmxremote.authenticate=true
-Dcom.sun.management.jmxremote.ssl=false
-Dcom.sun.management.jmxremote.login.config=TomcatJaas  (the module name)
-Djava.security.auth.login.config=/path/to/jaas.config           
-Dcom.sun.management.jmxremote.access.file=/path/to/jmxremote.access

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51119] extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #5 from Mark Thomas <ma...@apache.org> 2011-05-18 12:41:26 UTC ---
Fixed in 6.0.x and will be included in 6.0.33 onwards.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51119] extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

Edward <ed...@igindex.co.uk> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |edward.quick@igindex.co.uk

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51119] extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

--- Comment #3 from Neil laurance <ne...@gmail.com> 2011-04-26 05:36:16 EDT ---
(In reply to comment #1)
> Enhancement requests with proposed patches tend to get addressed more quickly
> than those without.

Apologies, didn't have time to add my patch before your reply ;-)

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51119] extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

Neil laurance <ne...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #26934|Diff from tc-trunk -        |Diff from trunk - changes
        description|changes                     |JmxRemoteLifecycleListener
                   |JmxRemoteLifecycleListener  |only
                   |only                        |

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51119] extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

--- Comment #2 from Neil laurance <ne...@gmail.com> 2011-04-26 05:32:51 EDT ---
Created an attachment (id=26934)
 --> (https://issues.apache.org/bugzilla/attachment.cgi?id=26934)
Diff from tc-trunk - changes JmxRemoteLifecycleListener only

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org

DO NOT REPLY [Bug 51119] extras - JmxRemoteLifecycleListener does not support JAAS based authentication and authorisation

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=51119

Mark Thomas <ma...@apache.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Severity|minor                       |enhancement

--- Comment #1 from Mark Thomas <ma...@apache.org> 2011-04-26 05:31:42 EDT ---
Enhancement requests with proposed patches tend to get addressed more quickly
than those without.

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org