providing jmx access in read-only mode

[Cedric Hurst <ce...@gmail.com>]

I'm looking to use the Geronimo JMX Remoting Connector to listen for certain
MBean values, but I want to ensure that a listener does not have the ability
to change these values.  I've poked around the jmxremoting source, but
couldn't find any reference to read or write privileges.  Is this possible
in Geronimo?

--
View this message in context: http://apache-geronimo.328035.n3.nabble.com/providing-jmx-access-in-read-only-mode-tp2830964p2830964.html
Sent from the Users mailing list archive at Nabble.com.

Re: providing jmx access in read-only mode

[David Jencks <da...@yahoo.com>]

Hi Cedric, 

that looks interesting, I've never seen it before.  We install an authenticator, but that doesn't immediately appear to relate closely with the role/permissions stuff.  I don't see any mention of this in the javax.management javaodcs although there are some permissions.

I'd be interested to know what happens if you try to set this up.  My first guess is that you might need the login module used by the authenticator to add a JMXPermission to the subject with name equal to one of the roles mapped to readonly.

thanks!
david jencks

On Apr 17, 2011, at 3:36 PM, Cedric Hurst wrote:

> There appears to be support for access permissions in the JMX Agent provided
> by the JDK.
> 
> http://download.oracle.com/javase/1.5.0/docs/guide/management/agent.html#PasswordAccessFiles
> 
> Just wondering how something like that would hook into Geronimo.
> 
> --
> View this message in context: http://apache-geronimo.328035.n3.nabble.com/providing-jmx-access-in-read-only-mode-tp2830964p2832418.html
> Sent from the Users mailing list archive at Nabble.com.

Re: providing jmx access in read-only mode

[Cedric Hurst <ce...@gmail.com>]

There appears to be support for access permissions in the JMX Agent provided
by the JDK.

http://download.oracle.com/javase/1.5.0/docs/guide/management/agent.html#PasswordAccessFiles

Just wondering how something like that would hook into Geronimo.

--
View this message in context: http://apache-geronimo.328035.n3.nabble.com/providing-jmx-access-in-read-only-mode-tp2830964p2832418.html
Sent from the Users mailing list archive at Nabble.com.

Re: providing jmx access in read-only mode

[David Jencks <da...@yahoo.com>]

There's no code in geronimo to support this.  Is there any support for this kind of authorization in jmx itself?

thanks
david jencks

On Apr 17, 2011, at 7:48 AM, Cedric Hurst wrote:

> I'm looking to use the Geronimo JMX Remoting Connector to listen for certain
> MBean values, but I want to ensure that a listener does not have the ability
> to change these values.  I've poked around the jmxremoting source, but
> couldn't find any reference to read or write privileges.  Is this possible
> in Geronimo?
> 
> --
> View this message in context: http://apache-geronimo.328035.n3.nabble.com/providing-jmx-access-in-read-only-mode-tp2830964p2830964.html
> Sent from the Users mailing list archive at Nabble.com.