Accessing Tomcat Manager Via URLConnection

Hi,
Does anyone know how to access Tomcat Manager using URLConnection? or Can it be done at all?
I'm using URLConnection, javax.mail.authenticator, and javax.mail.PasswordAuthentication. It seems that I can get to the correct URL, but the servlet can't get pass thru the login dialog box(username ,password)
for example if you're using Tomcat 5 and type http://localhost/manager/reload?path=/, this will prompt you a login dialog box and if you enter correct username and password with manager role, tomcat will reload the ROOT web application
I want to get pass that login box, but my servlet doesn't seem to work.
Here's my code so far:
package reload;
import javax.mail.*;
import javax.servlet.*;
import javax.servlet.http.*;
import java.io.*;
import java.net.*;
public class Reload extends HttpServlet
     public void doGet(HttpServletRequest request, HttpServletResponse response)
                              throws ServletException, IOException
          URL url = new URL("http://localhost/manager/reload?path=/");
          URLConnection connection = url.openConnection();
           //----------------------------------Output Stream to supply username and password---
        javax.mail.Authenticator auth = new Auth();
          connection.setDoOutput(true);
          PrintWriter out = new PrintWriter(connection.getOutputStream());
          out.println(auth);   //this is supposed to supply the username and password to Tomcat
          out.close();
            //--------------------------------Input Stream to get content result-------------------
          BufferedReader in = new BufferedReader(new InputStreamReader(connection.getInputStream()));
          String inputLine;
          while ((inputLine = in.readLine()) != null)
               response.setContentType("text/html");
               PrintWriter out1 = response.getWriter();
               out1.println(inputLine);
          in.close();
       //-------------------sub class to store username and password-------------------------------
     private class Auth extends javax.mail.Authenticator
         public javax.mail.PasswordAuthentication getPasswordAuthentication()
             return (new javax.mail.PasswordAuthentication("test","123"));
}

The manager application uses basic authentication. Therefore, you need to add a header to the request you make to the manager URL. Below is an example:
HttpURLConnection httpconn = (HttpURLConnection)connection;
String auth = strUsername + ":" + strPassword;
httpconn.setRequestProperty("Authorization", "Basic " + Base64.encode(auth.getBytes()));
The Base64 class is in the package org.apache.catalina.util, which is located in the file catalina-ant.jar. Here, I used it as a convenience.
I also recommend re-writing your input/output loop to:
BufferedReader in = new BufferedReader(new InputStreamReader(connection.getInputStream()));
String inputLine;          
PrintWriter out1 = response.getWriter();
response.setContentType("text/html");               
while ((inputLine = in.readLine()) != null)     {
     out1.println(inputLine);
in.close();
I hope this helps.

Similar Messages

  • Accessing Enteprise Manager via Cluster Scan VIP

    Hello all...
    We have a few clusters set up, and we've been accessing Enterprise Manager for these via the cluster scan IP address. For some unknown reason we now cannot access two of the three OEM installations via the scan IP, only by the IP address of the first node. Unfortunately I wasn't involved in this stage of the setup and I'm not having a lot of luck finding docs relevant to this.
    The clusters are running 11.2.0.2 Standard with the January 2012 patch set, and the nodes in the clusters with the issue don't have any problem pinging each other or the scan URL for the custer, if that's helpful.
    Can someone point me in the right direction?
    Thanks,
    Dan
    Edited by: ddenton on Apr 20, 2012 11:11 AM
    Edited by: ddenton on Apr 20, 2012 11:18 AM

    Ravi,
    DB Control was set up independently of the database using "emca".
    The scan name in the emoms.properties file does match up with what's listed when running the "srvctl config scan" command.
    When I attempt to connect to the scan address from Node2 using the following command, I get this response:
    [oracle@devdb2 ~]$ sqlplus username/[email protected]:1521/DEVDB
    SQL Plus: Release 11.2.0.2.0 Production on Mon Apr 23 10:41:00 2012
    Copyright (c) 1982, 2010, Oracle. All rights reserved.
    ERROR:
    ORA-12514: TNS:listener does not currently know of service requested in connect
    descriptor
    I have no problem tns pinging the scan name or the database name:
    [oracle@devdb2 ~]$ tnsping devdb-scan.rp.db
    TNS Ping Utility for Linux: Version 11.2.0.2.0 - Production on 23-APR-2012 10:42:10
    Copyright (c) 1997, 2010, Oracle. All rights reserved.
    Used parameter files:
    Used HOSTNAME adapter to resolve the alias
    Attempting to contact (DESCRIPTION=(CONNECT_DATA=(SERVICE_NAME=))(ADDRESS=(PROTOCOL=TCP)(HOST=10.10.10.130)(PORT=1521)))
    OK (0 msec)
    [oracle@devdb2 ~]$ tnsping DEVDB
    TNS Ping Utility for Linux: Version 11.2.0.2.0 - Production on 23-APR-2012 10:42:34
    Copyright (c) 1997, 2010, Oracle. All rights reserved.
    Used parameter files:
    Used TNSNAMES adapter to resolve the alias
    Attempting to contact (DESCRIPTION = (ADDRESS = (PROTOCOL = TCP)(HOST = devdb1-vip.company.com)(PORT = 1521)) (ADDRESS = (PROTOCOL = TCP)(HOST = devdb2-vip.company.com)(PORT = 1521)) (LOAD_BALANCE = yes) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME = DEVDB.company.com)))
    OK (0 msec)
    Connecting using the following command directly to the TNS name for the database works too, so I'm a bit confused as to why specifying the scan name with port doesn't...
    [oracle@devdb2 ~]$ sqlplus username/password@DEVDB
    SQL*Plus: Release 11.2.0.2.0 Production on Mon Apr 23 16:16:40 2012
    Copyright (c) 1982, 2010, Oracle. All rights reserved.
    Connected to:
    Oracle Database 11g Release 11.2.0.2.0 - 64bit Production
    With the Real Application Clusters and Automatic Storage Management options
    SQL>
    ##################################

  • Accessing process manager via JNDI

    We are developing with Appserver 6.5, and also the the
    process manager running inside the appserver. Unfortunately our
    experience is that 6.5 is not stable enough to develop and deploy
    our app. However we do need to use the process manager.
    I'm now trying to run our application in Catalina (7.0) and use
    a JNDI reference to talk to the process manager beans in
    6.5. however the jndi lookup fails.
    javax.naming.NamingException: com.netscape.pm.model.IPMClusterManager
    I'm pretty sure I need to provide additional parameters in server.xml
    for this lookup... but cannot find -any- documentation as to what
    parameters are used.
    ideas?
    thanks
    Roy

    We are developing with Appserver 6.5, and also the the
    process manager running inside the appserver. Unfortunately our
    experience is that 6.5 is not stable enough to develop and deploy
    our app. However we do need to use the process manager.
    I'm now trying to run our application in Catalina (7.0) and use
    a JNDI reference to talk to the process manager beans in
    6.5. however the jndi lookup fails.
    javax.naming.NamingException: com.netscape.pm.model.IPMClusterManager
    I'm pretty sure I need to provide additional parameters in server.xml
    for this lookup... but cannot find -any- documentation as to what
    parameters are used.
    ideas?
    thanks
    Roy

  • Cannot Access Busniess Rules via EAS Admin or HBRLauncher for EPM 11.1

    An error occurred: Login Failed. Please login again.
    Error Message:Error logging in to Business Rules. The repository has not been configured or you are not authorized to use Business Rules.
    Complete Detail: Detail:Error authenticating user in UserServerManager. Detail:Error authenticating user in UserServerManager. Detail:Error authenticating user in UserServerManager. Detail:Exception occurred. Please check your log file for details.
    I can log into Essbase and create applications and etc. It's in Shared Security Mode with Shared Services.
    Dimension Library and Applications Library.
    I cannot access Calc Manager Via EPMA interface either, so this is a 2 question thread but Business rules being more critical.
    Any ideas?

    hi ,
    In shared services you have a separate node for business rule wherein you can assign user or group the access to the business rules for ex one of the role is "Interactive User"(If you assign this access it will let user to validate and launch the rule but they cant change the business rule).
    Once you have assigned the role to user in shared service you would like to update the user list via EAS for business rules.
    Thanks!

  • Multiple Top-Level Realms in Access Manager via AMconfig?

    Is it possible to configure multiple top-level realms in Access Manager via AMconfig? It is not possible through the UI.

    Hi!
    How about this:
    String adminDN = (String)AccessController.doPrivileged(new AdminDNAction());
    String adminPwd = (String)AccessController.doPrivileged(new AdminPasswordAction());
    adminToken = adminManager.createSSOToken(new AuthPrincipal(adminDN), adminPwd);
    hth Chris

  • Accessing Solution Manager CHARM Via SAP CRM

    Hi
    Is it possible to accces charm of soultion manager via SAP CRM
    If so how does it work and documentation are welcomed
    Thanks in advance
    R-K

    option 1
      > customise sap crm to cater for the external product in terms of what solution manager charm / service is currently doing for sap componet
        . Create all the status for this products eg: transport is in Dev for product A, Transprot is in QA for product A or product is in Prod then test and close the call
    > access solution manager from crm (NB: work center / service desk can be accessed through crm) the problem is WE NOT SURE OF CHARM
    > also customise crm to cater for IT related issues like broken laptop or netowrk cable not working or  IT related query,
    Option 2
    > intergrate the external product to solution manager o
    > Customise CHARM / service desk to cater for this external product in solution manager the way it does for sap components / ibase

  • Tomcat /manager commends from Servlet

    Hi all,
    I asked a question regarding the excution of Tomcat /manager commands from a servlet and I got no replies... :(
    Well, I never found a way to directly execute the /manager commands from the servlet (API) - but I did (eventually) get it working via URLConnection. Now, I've decided to release my (simple) code here so that it may help others!
    This code searches for a context and then checks if it is running, if it is found not to be running it will attempt to start it. (tested and found to work under Tomcat 5.0.28).
      String
        protocol  = "http",
        host      = "localhost",
        usr       = "usr",
        pwd       = "pwd",
        context   = "/myapp";
      int port = 80;
      URL list = new URL(protocol,host,port,"/manager/list");
      URLConnection c = (URLConnection)list.openConnection();
      String encs = new sun.misc.BASE64Encoder().encode((usr+":"+pwd).getBytes());
      c.setDoInput(true);
      c.setRequestProperty("Authorization", "Basic " + encs);
      c.connect();
      BufferedReader buf = new BufferedReader(new InputStreamReader(c.getInputStream()));
      String line;
      while ( (line = buf.readLine()) != null )
         * Search for the /workpackages context
        if ( line.startsWith(context+":") )
           * Found the context
           * Now make sure that it's running
          if ( line.indexOf("running") > 0 )
             * Context /workpackages found to be running!
              System.out.println("Context ["+context+"] - Running!");
          else
             * Context found NOT to be running!
             * Try and start the context!
            buf.close();
            System.out.println("Context ["+context+"] - Attempting to start context...");
            URL start = new URL(protocol,host,port,"/manager/start?path="+context);
            c = (URLConnection)start.openConnection();
            c.setDoInput(true);
            c.setRequestProperty("Authorization", "Basic " + encs);
            c.connect();
            buf = new BufferedReader(new InputStreamReader(c.getInputStream()));
            while ( (line = buf.readLine()) != null ) System.out.println(line);
          break;
    notes:
    The buffer reading after both commands seems to be required! I don't know why... But I found that without them, the manager commands seem to be ignored!?!? odd!
    Well, I hope this helps someone...

    thanx
    but when i am Deploying directory or WAR file located on server
    where is this XML Configuration file,
    so that i can fill in the text box-XML Configuration file URL
    and secondly in tomcat 5.5.4
    there is no context path described in server.xml
    so where is this in 5.5.4

  • Firefox is freezing. When I close Firefox, and try to re-start it, it will not open. I need to access Task Manager, where I find Firefox still running. I close Firefox in Task Manager & can re-start Firefox.

    Firefox is freezing in the middle of a browsing session. When I close Firefox, and try to re-start it, it will not open. I need to access Task Manager, where I find Firefox to still be running. Once I close Firefox in Task Manager, I can re-start Firefox. This can happen several times in the space of a few hours? I'm running Vista Home premium with Firefox 3.6.16, and this problem has only started in the last 4 weeks. Can Anyone Help? Core 2 Duo E7300 with 4GB RAM.

    Sounds like it is hanging when you exit and later try to restart Firefox.
    * How to stop the running Firefox process
    ** In Task Manager, does firefox.exe show in the '''<u>Processes</u>''' tab?
    ** See: http://kb.mozillazine.org/Kill_application
    **Windows 7 users: http://www.techrepublic.com/blog/window-on-windows/reap-the-benefits-of-windows-7s-task-manager/2576
    * What may cause Firefox to hang at exit
    **Windows 7 Task Manager: http://www.techrepublic.com/blog/window-on-windows/reap-the-benefits-of-windows-7s-task-manager/2576
    ** http://support.mozilla.com/en-US/kb/Firefox+hangs
    ** http://kb.mozillazine.org/Firefox_hangs
    ** https://support.mozilla.com/en-US/kb/Firefox+is+already+running+but+is+not+responding
    * You may need to try Firefox Safe Mode
    ** You may need to use '''Safe Mode''' to locate the problem: ***See: http://kb.mozillazine.org/Safe_Mode
    ***Firefox 4 users, hold the Shift key while clicking the Firefox 4 desktop icon to enter Safe Mode.
    ***Firefox Safe Mode is a diagnostic mode that disables Extensions and some other features of Firefox.
    ****In Firefox 4, Safe Mode also disables Plugins and Hardware Acceleration.
    ****If you are using a theme, switch to the DEFAULT theme: Tools > Add-ons > Themes '''<u>before</u>''' starting Safe Mode (In Firefox 4, Tools > Add-ons > Appearance). See: http://support.mozilla.com/en-US/kb/Using%20themes%20with%20Firefox#w_managing-themes-and-personas
    ****When entering Safe Mode, do not check any items on the entry window, just click "Continue in Safe Mode".
    ****Test to see if the problem you are experiencing is corrected.
    *** If the problem does not occur in Safe-mode then disable all of your Extensions and Plug-ins and then try to find which is causing it
    ***#by enabling '''<u>one at a time</u>''' until the problem reappears.
    ***#You can also enable a few at a time (3-5), keeping track of what you just re-enabled to see if the problem re-occurs; this will help narrow down the possibilities if you have a large number of add-ons.
    ***#'''<u>You MUST close and restart Firefox after EACH change</u>''' via File > Restart Firefox (on Mac: Firefox > Quit).
    ***#You can use "Disable all add-ons" on the Safe Mode start window.
    **See the following for more information
    *** http://support.mozilla.com/en-US/kb/Troubleshooting+extensions+and+themes
    *** http://support.mozilla.com/en-US/kb/Troubleshooting+plugins
    *** http://support.mozilla.com/en-US/kb/Basic+Troubleshooting
    <br />
    <br />
    '''You need to update the following:'''
    *Adobe Shockwave for Director Netscape plug-in, version 11.0
    *Shockwave Flash 10.2 r152
    #'''''Check your plugin versions''''' on either of the following links':
    #*http://www.mozilla.com/en-US/plugincheck/
    #*https://www-trunk.stage.mozilla.com/en-US/plugincheck/
    #*'''Note: plugin check page does not have information on all plugin versions'''
    #*There are plugin specific testing links available from this page:
    #**http://kb.mozillazine.org/Testing_plugins
    #'''Update Shockwave for Director'''
    #*NOTE: this is not the same as Shockwave Flash; this installs the Shockwave Player.
    #*Use Firefox to download and SAVE the installer to your hard drive from the link in the article below (Desktop is a good place so you can find it).
    #*When the download is complete, exit Firefox (File > Exit)
    #*locate and double-click in the installer you just downloaded, let the install complete.
    #*Restart Firefox and check your plugins again.
    #*'''<u>Download link and more information</u>''': http://support.mozilla.com/en-US/kb/Using+the+Shockwave+plugin+with+Firefox
    #'''Update the [[Managing the Flash plugin|Flash]] plugin''' to the latest version.
    #*Download and SAVE to your Desktop so you can find the installer later
    #*If you do not have the current version, click on the "Player Download Center" link on the "'''Download and information'''" or "'''Download Manual installers'''" below
    #*After download is complete, exit Firefox
    #*Click on the installer you just downloaded and install
    #**Windows 7 and Vista: may need to right-click the installer and choose "Run as Administrator"
    #*Start Firefox and check your version again or test the installation by going back to the download link below
    #*'''Download and information''': http://www.adobe.com/software/flash/about/
    #**Use Firefox to go to the above site to update the Firefox plugin (will also install plugin for most other browsers; except IE)
    #**Use IE to go to the above site to update the IE ActiveX
    #*'''Download Manual installers'''.
    #**http://kb2.adobe.com/cps/191/tn_19166.html#main_ManualInstaller
    #**Note separate links for:
    #***Plugin for Firefox and most other browsers
    #***ActiveX for IE

  • Wrt160nl Management via HTTPS

    Hi ,
    I have an issue with new Win8 & IE10.
    When I try to access web management interface of my wrt160nl (Firmware Version: 1.00.01 B15) via HTTPS I'm receiving the foolowing message:
    "Continue to this website (not recommended)."
    If I click on it another error page appears:
    "Certification error: Navigation blocked.
    There is a problem with this website's security certificate"
    At the same time I'm able to acccess the management interface via HTTPS, but from my laptop with Win7 & IE9. There if I click on the red Certificate Error > View certificate and the certificate information is:
    Issued by: Linksys
    Issued to: Linksys
    Valid from : 1.1.2009 to 1.1.2010
     So I'd like to know if I could update the router certificate or what settings should I use in IE10 in order to access the web management interface via HTTPS?
    BR,
    Krass

    You can try these steps. I found a workaround that might help you with the issue you are having since users who tried it reported that it worked for them.
    Try viewing https://192.168.1.1 in Compatibility View.
    Note: Not all website display problems are caused by browser incompatibility. Interrupted Internet connections, heavy traffic, or problems with the website can also affect how a webpage is displayed.
    Open IE.
    Press ALT+T keys, to launch “Tools” drop down menu.
    In the “Tools” menu, select “Compatibility View Settings” option.
    In the “Compatibility View” window, add the name of the site (with which you are facing the issue) and then check.
    Do check this link as well: Certificate errors: FAQ http://windows.microsoft.com/en-US/internet-explorer/certificate-errors-faq#ie=ie-10

  • No access to management interface on WLC4002

    my dilemma is the follwing:
    I've have a remotly connected WLC4002.
    The service port is in 10.10.4.0/23 and the management IF in 10.10.1.0/24. Both are connected to a L3 catalyst which is also providing the default gateway for both networks. (i.e. ~.254). To get access to the service port I had to add a route: "route add 10.0.0.0 255.0.0.0 10.29.5.254". The management IF is configured like this:
    "interface address management 10.10.1.240 255.255.255.0 10.10.1.254"
    But I can pignthe man.IF only from it's own network not from remote networks 10.x.y.0. For me it looks like as if this IF doesn't use it's configured def. gateway - but the static route from the service port. (btw: I can reach other nodes in the network of the manag.IF)
    Now I fear that I'll loose connection completly if I'm playing with the routing entries.
    Any idea how to configure that I can reach both interfaces?
    Or - in case change config won't work - is there something similiar like the IOS command "reload in"?
    Thanks for you help

    When the service port is connected to the network, you have to make sure the management port can't get to the service port subnet and vice versa, since it is used for out-of-band management. If there is a route then you might have issues.... I normally don't even connect the service port to the network at all, but that is just me.
    If you are trying to reach the wlc management port from a a subnet that one of the dynamic interfaces on the wlc is configured for, then you have to enable management via dynamic interface on the cli of the wlc.
    config network mgmt-via-dynamic-interface enable
    config network mgmt-via-wireless enable

  • EP and Solution Manager Via Webdispatcher

    Solution Manager Via Webdispatcher
    Dear All,
    We have installed the Webdispatcher 7.4 and did the SSL setup and maintained necessary parameters to  access our Portal and ECC systems from internet and its working fine for indepedent Java and ABAP stack.
    Now when we are trying to access the solution manager via webdispatcher using webgui, it opens but when its calling the webdynpros like solman_setup, the page is not openning. The same case is in our portal system also, when its calling the webdynpro of backend system its not openning.
    During our analysis we found the urls are called from the local machine to the backend host (ABAP)  directly and there is no where its communicating the webdispatcher.
    Can you please guide me what kind up setup can be done to access the Portal and solution manager complete functionality via webdispatcher.
    I have checked many posts on the forum and was totally confused on the solution approches. So trying to filter it down to do a proper setup which is feasible to our landscape and infra team.
    FYI Our Solman is on 7.1 SPS10 and portal is on 7.4, OS windows
    Looking forward for your valuable inputs
    Thanks & Regards,
    Satyabrat

    Thanks Samuli,
    I tried it..its working for solman but in my ECC (NW 7.31) its not working for web dynpros. Its going to hostname:8001 port and not redirecting to webdispatcher.
    Pleae let me know if I am missing something.
    Thanks & Regards,
    Satyabrat

  • Tomcat Manager Portal in BlazeDS Turnkey Server

    Hi all,
    Im pretty new to blazeds, and liking what i have experienced thus far. Could anyone please tell me how to access the Tomcat Manager Portal within the BlazeDS Turnkey Server Installation.
    Like in know it runs on port 8400 by default. So running it then opening http://localhost:8400 gets me the blazeds turnkey home page with links to the sample apps.
    However I want to get to the Tomcat Portal to change file access permissions etc. And if i wanted to deploy apps from there etc.
    Is this possible?
    Please advise!
    Kind Regards
    Willem

    Follow the instructions here:
    http://blog.techstacks.com/2009/05/tomcat-management-setting-up-tomcat.html
    Basically just add a user and role to the $CATALINA_HOME/conf/tomcat-users.xml:
    <?xml version='1.0' encoding='utf-8'?>
    <tomcat-users>
      <role rolename="manager"/>
      <user username="tomcat" password="tomcat" roles="manager"/>
    </tomcat-users>
    Then use the URL: http://localhost:8400/manager/html to access the manager.

  • Unable to create a test  via Content Management via Content Administration

    I am unable to create a test or survey via Content Management via Content Administration because insufficient privileges message. I create the folder and enter the test information for creating a test and then I after I click apply. I get message “You have insufficient privileges for the current operation. Please contact your System Administrator”.
    The System Administrator viewed the profile being tied to the responsibility and thinks there is no problem. Somebody please!!!!!!!!!!!!!!
    Help……

    Hi, James.
    If you add the main "Learning Administrator" role (UMX|OTA_LRNG_ADMIN), it will include all child roles for the Administrator, including the Learning Content Administrator, Learning Catalog Administrator, Learning Enrollment Administrator, Learning Finance Administrator, Learning Resource Administrator, and Learning Setup Administrator. If you don't have all of these roles, there are functions you will not have access to under the Learning Administrator responsibilities.
    The "Learning Instructor - Update" role only allows users that have the Learning Instructor Self-Service responsibility to update enrollment statuses for Learners that have attended classes that they are set as a resource for and won't impact the Administrator functionality.
    Anne
    Edited by: anne2 on Jun 5, 2013 2:09 AM (Fixed code for Learning Administrator role - Just noticed it was listed as the Enrollment Administrator role instead of the main Learning Administrator role)

  • Why I can't connect to Oracle Enterprise Manager via browser after install?

    I've installed Oracle9iAS Release2(9.0.2) with Windows 2000 server (servicepack3) and Oracle9i database on the same host.After installation, I can use Oracle enterprise manager(via browser) by connect as "ias_admin" and "12345" for password (It's a password that I input at installing). But 2 days later, I cannot connect it!, what's happen to my 9iAS. I try to change my password in command line by "emctl set password <old_pwd> <new_pwd>, But I've got a message that is incorrect password. By the way, I use command line to start OC4J and HTTP Server instead. Please help me for this problem. Thank you very much.
    Ps. I've got this problem for 2 time, but the first time I delete all of oracle products and install it again .

    If you have installed the Oracle AS 10.1.3 using an Apache in front the default port is 7777 as far as I know.
    You wrote that the main page is accessible, that's why I would suspect that you might have a problem with your hostname. Are you accessing the mainpage via the full qualified hostname or via ip?
    Please ensure that you can reach the server using the full qualified hostname!
    If you are not sure about it, add an entry to your local hosts-file.
    Please tell us if this was your problem!
    Regards,
    Eric

  • Disabling Management via Wireless - is there any point?

    Hey guys.
    Firstly, yes, I do know that allowing management of controllers over an unsecured WLAN is a bad idea (although even that would be SSL-secured by default, but open to brute-forcing I'd guess).
    Secondly, let's assume that Management via Dynamic Interfaces is disabled too (why anyone would want to enable that is a bit beyond me too?).
    This 1 little tickbox manages to justify an entire page in the GUI, so it definitely looks pretty darn important!
    The problem is that in a multi-controller environment the only controller that knows you're connecting over wireless is the one that you're connecting through. Any other controller will be happy to accept the management connection on it's management interface address because it sees it as coming from the wired network. To prevent this from happening I think you could do either of two things...
    1) Apply a CPU ACL that blocks the client IP ranges, which will work equally well for wireless and wired-side connections, i.e. it's the equivalent of the "management via wireless" setting but works for all controllers simultaneously. You'd have to remember to keep this updated though if ever your WLANs and client ranges change.
    2) Put the management interfaces of all controllers in an isolated management VLAN (which will potentially complicate all your supporting services access, e.g. DHCP/RADIUS/etc.). That'll stop the undesirable "wired" access on the n-1 controllers and then the mgmt-via-wireless will take care of the wireless access to the other 1 controller.
    So the setting seems rather pointless on it's own in anything other than in a single-controller environment. I'm sure I've read somewhere that the controllers do tell each other about their current clients (for things like CCKM and rogue management), so wouldn't it be cool if this centralised awareness logic was applied to management connections?
    What are the experiences out there with this feature? Is it generally seen as worthwhile, or does it really need some extra planning and possible augmentation via other features to be of any value?
    In general, other than popular paranoia about wireless being "less secure" than wired access, what are the compelling reasons for denying management via wireless? As I mentioned above, even over a completely non-secured WLAN you'd still have SSL/SSH security if you configure your allowed management protocols right.
    Thanks,
    Justin

    Yes "It makes the auditors happy" is definitely a good and valid reason.
    I've just co-incidentally come across this in the 5.0.148 release notes:
    http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn501480.html#wp234100
    "Preventing Clients from Accessing the Management Network on a Controller
    To prevent or block a wired or wireless client from accessing the management network on a controller (from the wireless client dynamic interface or VLAN), the network administrator should ensure that there is no route through which to reach the controller from the dynamic interface or use a firewall between the client dynamic interface and the management network."
    That makes sense, but do many folks out there do it that way? Generally there's not much control between the management VLAN and the users' VLAN because the latter is usually where the wireless-supporting services reside.

Maybe you are looking for