You are viewing a plain text version of this content. The canonical link for it is here.
Posted to derby-commits@db.apache.org by rh...@apache.org on 2023/01/05 17:21:06 UTC

svn commit: r1906408 - /db/derby/docs/trunk/src/adminguide/radminjmxintro.dita

Author: rhillegas
Date: Thu Jan  5 17:21:05 2023
New Revision: 1906408

URL: http://svn.apache.org/viewvc?rev=1906408&view=rev
Log:
DERBY-7149: Update MBeans documentation to mention deserialization filters; commit derby-7149-03-aa-JMXdocs.diff.

Modified:
    db/derby/docs/trunk/src/adminguide/radminjmxintro.dita

Modified: db/derby/docs/trunk/src/adminguide/radminjmxintro.dita
URL: http://svn.apache.org/viewvc/db/derby/docs/trunk/src/adminguide/radminjmxintro.dita?rev=1906408&r1=1906407&r2=1906408&view=diff
==============================================================================
--- db/derby/docs/trunk/src/adminguide/radminjmxintro.dita (original)
+++ db/derby/docs/trunk/src/adminguide/radminjmxintro.dita Thu Jan  5 17:21:05 2023
@@ -127,6 +127,21 @@ instance.</p>
 <li>Instruments:
 <codeph>org.apache.derby.impl.services.cache.ConcurrentCache</codeph></li>
 </ul>
+
+<p>
+For security reasons, JDK 20 restricted the deserialization of objects by remote MBeans. You will need to loosen those restrictions if you see the following message when accessing the <codeph>org.apache.derby.mbeans.CacheManagerMBean</codeph>:
+</p>
+
+<codeblock><b>java.io.InvalidClassException: filter status: REJECTED
+</b></codeblock>
+
+<p>
+To loosen the restrictions, you must relax the default deserialization filter declared in <i>$JAVA_HOME/conf/management/management.properties</i>. Edit that file in the JVM of your JMX client. The following liberal deserialization filter will work with <codeph>org.apache.derby.mbeans.CacheManagerMBean</codeph>:
+</p>
+
+<codeblock><b>com.sun.management.jmxremote.serial.filter.pattern=*
+</b></codeblock>
+
 </section>
 </refbody>
 </reference>