db-derby-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Apache Wiki <wikidi...@apache.org>
Subject [Db-derby Wiki] Update of "JMXSecurityExpectations" by DanDebrunner
Date Fri, 08 Feb 2008 17:42:15 GMT
Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Db-derby Wiki" for change notification.

The following page has been changed by DanDebrunner:
http://wiki.apache.org/db-derby/JMXSecurityExpectations

The comment on the change is:
Couple of questions in the DatabaseMBean section

------------------------------------------------------------------------------
  
   * Provides access to database settings and operations.
   * Settings may be ''read-only'' or ''readwrite''.
-  * A new '''DatabaseMBean''' will be created for each booted database. Such MBeans will
be enabled automatically if '''*-authc''' and '''db-authr''' is disabled.
+  * A new '''DatabaseMBean''' will be created for each booted database. Such MBeans will
be enabled automatically if '''*-authc''' and '''db-authr''' is disabled. /!\ How are the
beans enabled if '''*-authc''' and '''db-authr''' are enabled? How can Derby code check the
state of jmx-authc? Maybe this is using enabled incorrectly? If jmx is running then DatabaseMBean
should be enabled, not all jmx-users may be able to use the bean, but it will still be enabled.??
-  * If any of '''*-authc''' are enabled, the JMX user must pass all authentication checks
('''jmx-authc''', '''derby-authc''', '''db-authc''') that are enabled for this type of access
(connecting to this particular database using this particular Derby system).
+  * If any of '''*-authc''' are enabled, the JMX user must pass all authentication checks
('''jmx-authc''', '''derby-authc''', '''db-authc''') that are enabled for this type of access
(connecting to this particular database using this particular Derby system). /!\ Why is '''derby-authc'''
included here, to connect to a database '''derby-authc''' is not required, so why to administer
it?
  
  
  == Notes/Issues ==

Mime
View raw message