You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-commits@db.apache.org by rh...@apache.org on 2023/01/05 17:21:06 UTC
svn commit: r1906408 - /db/derby/docs/trunk/src/adminguide/radminjmxintro.dita
Author: rhillegas
Date: Thu Jan 5 17:21:05 2023
New Revision: 1906408
URL: http://svn.apache.org/viewvc?rev=1906408&view=rev
Log:
DERBY-7149: Update MBeans documentation to mention deserialization filters; commit derby-7149-03-aa-JMXdocs.diff.
Modified:
db/derby/docs/trunk/src/adminguide/radminjmxintro.dita
Modified: db/derby/docs/trunk/src/adminguide/radminjmxintro.dita
URL: http://svn.apache.org/viewvc/db/derby/docs/trunk/src/adminguide/radminjmxintro.dita?rev=1906408&r1=1906407&r2=1906408&view=diff
==============================================================================
--- db/derby/docs/trunk/src/adminguide/radminjmxintro.dita (original)
+++ db/derby/docs/trunk/src/adminguide/radminjmxintro.dita Thu Jan 5 17:21:05 2023
@@ -127,6 +127,21 @@ instance.</p>
<li>Instruments:
<codeph>org.apache.derby.impl.services.cache.ConcurrentCache</codeph></li>
</ul>
+
+<p>
+For security reasons, JDK 20 restricted the deserialization of objects by remote MBeans. You will need to loosen those restrictions if you see the following message when accessing the <codeph>org.apache.derby.mbeans.CacheManagerMBean</codeph>:
+</p>
+
+<codeblock><b>java.io.InvalidClassException: filter status: REJECTED
+</b></codeblock>
+
+<p>
+To loosen the restrictions, you must relax the default deserialization filter declared in <i>$JAVA_HOME/conf/management/management.properties</i>. Edit that file in the JVM of your JMX client. The following liberal deserialization filter will work with <codeph>org.apache.derby.mbeans.CacheManagerMBean</codeph>:
+</p>
+
+<codeblock><b>com.sun.management.jmxremote.serial.filter.pattern=*
+</b></codeblock>
+
</section>
</refbody>
</reference>