How do users access JMX functions?

Hi,

Luis-Miguel Alventosa has a very detailed series of entries on his blog which talk of authentication/authorization.

http://blogs.sun.com/lmalventosa/entry/jmx_authentication_authorization

I am not sure whether accessing the IP of the client is always feasible - but if you put in place some authentication/authorisation mechanism based on Subjects, you should be able within your MBean to read the Principals (=users) that were authentified for this operation. something like:

final AccessControlContext acc = AccessController.getContext();

final Subject subject = Subject.getSubject(acc);

You can then examine the <a href="http://java.sun.com/javase/6/docs/api/javax/security/auth/Subject.html">Subject</a> and retrieve the <a href="http://java.sun.com/javase/6/docs/api/java/security/Principal.html">Principal(s)</a> that was/were authentified.

Hope this can help you,

-- daniel

JMX, SNMP, Java, etc...

http://blogs.sun.com/jmxetc

dfuchsa at 2007-7-15 14:29:18 >