Simple authentication.

I want to do something which seems like it should be simple. I want to setup -Dcom.sun.management.jmxremote.port=51017 and have it so that either

1) No password is required but access is readonly

or

2) A password is required, which I shall configure in jxmremote.password but I don't have to make the jmxremote.password file read only (this is not possible in my deployment environment). I fully understand the security implications of this and they are acceptable to me, so why does the JVM insist on it being read only, to the point of not starting the VM?

Any ideas? Undocumented system properties perhaps?

[643 byte] By [donaldwa] at [2007-11-26 17:46:35]
# 1

If you have a password file then you must secure yet. There isn't (currently) any way to start the agent with an insecure password file. Which operating system is this? (just curious on the issues that prevents you securing the password file). One thing to mention is that the security requirements on the password file are overly restrictive on Windows and this is something that needs to be re-examined.

alan.batemana at 2007-7-9 4:58:48 > top of Java-index,Core,Monitoring & Management...
# 2

Hi,

Here is an excellent article by Luis Miguel Alventosa which shows the various

options that you have for securing a JMX application with the JMX RMI connectors:

Authentication and Authorization in JMX RMI connectors

http://blogs.sun.com/lmalventosa/entry/jmx_authentication_authorization

Cheers,

-- daniel

http://blogs.sun.com/jmxetc

dfuchsa at 2007-7-9 4:58:48 > top of Java-index,Core,Monitoring & Management...