Connect to remote jmx with password

Question

Hello,
now I�ve a problem to connect a remote jmx server with passord authentification. No idea why it does not work, here my configuration:
jmxremote.password:
================
# or specify another, less accessible file in the management config file
# as described above.
# Following are two commented-out entries. The "measureRole" role has
# password "QED". The "controlRole" role has password "R&D".
test test1
jmxremote.access
================
# Default access control entries:
# o The "monitorRole" role has readonly access.
# o The "controlRole" role has readwrite access.
test readwrite
This are my sys parameter:
JAVA_OPTS="$JAVA_OPTS -Dcom.sun.management.jmxremote.port=9004"
JAVA_OPTS="$JAVA_OPTS -Dcom.sun.management.jmxremote.ssl=false"
JAVA_OPTS="$JAVA_OPTS -Dcom.sun.management.jmxremote"
JAVA_OPTS="$JAVA_OPTS -Dcom.sun.management.jmxremote.access.file=/home/tomcat/jmxremote.access"
JAVA_OPTS="$JAVA_OPTS -Dcom.sun.management.jmxremote.password.file=/home/tomcat/jmxremote.password"
The .access and .password file is on the correct place and there is no exception because of the file access rights. If I start the remote jconsole with -J-Djava.security.debug=all, this is the end:
jar:
jar: beginEntry com/sun/crypto/provider/SunJCE_i.class
jar: Manifest Entry: com/sun/crypto/provider/SunJCE_i.class digest=SHA1
jar: manifest d462e6ef45ec12081028cd7ccf922cc2ec553358
jar: computed d462e6ef45ec12081028cd7ccf922cc2ec553358
jar:
Cipher: Crypto Permission check failed
Cipher: granted: (CryptoPermission * 128)
Cipher: requesting: (CryptoPermission AES 256)
I�ve found already a solution for that and connect with jconsole with the url service:jmx:rmi:///jndi/rmi://hostname:9004/jmxconsole
Provider: Set SUN provider property [SecureRandom.SHA1PRNG ImplementedIn/Software]
Provider: Set SUN provider property [CertificateFactory.X.509 ImplementedIn/Software]
Provider: Set SUN provider property [KeyStore.JKS ImplementedIn/Software]
Provider: Set SUN provider property [CertPathValidator.PKIX ImplementedIn/Software]
Provider: Set SUN provider property [CertPathBuilder.PKIX ImplementedIn/Software]
Provider: Set SUN provider property [CertStore.LDAP ImplementedIn/Software]
Provider: Set SUN provider property [CertStore.Collection ImplementedIn/Software]
Provider: Set SUN provider property [CertStore.com.sun.security.IndexedCollection ImplementedIn/Software]
ProviderConfig: Loaded provider SUN version 1.6
Although there is no exception I am unable to connect to the remote jmx server...
Thx for any help!
Cheers,
Thilko
Edited by: smilie79 on Jan 17, 2008 1:53 AM
Edited by: smilie79 on Jan 21, 2008 2:51 AM

Answer 1

Hi,
You might need to specify explicitely -Dcom.sun.management.jmxremote.authenticate=true on the command line.
Hope this helps,
-- daniel
http://blogs.sun.com/jmxetc