Mailing-List: contact user-help@karaf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@karaf.apache.org
Received-SPF: pass (athena.apache.org: domain of dantran@gmail.com designates
 209.85.218.48 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAPCjjnG04+0zzDNP12PaLv1q3k26FDWoXtJ0O76v1-fD1cMmoQ@mail.gmail.com>
References: 
 <CAPCjjnHHAFMZmn9FqaBa4zBJScbPssk7Tr915nvO-YAL5MGA5g@mail.gmail.com>
	<8AAB5393-650D-4A15-BAD8-26DC10026ECE@yahoo.com>
	<CAPCjjnG04+0zzDNP12PaLv1q3k26FDWoXtJ0O76v1-fD1cMmoQ@mail.gmail.com>
Date: Wed, 6 Jul 2011 16:01:33 -0700
Message-ID: 
 <CAPCjjnF_5Cm33XESc8o7en+g=HPV-7V9Ru-qGhkdMi7G49f1Ow@mail.gmail.com>
Subject: Re: Turn off karaf jmx authentication
From: Dan Tran <dantran@gmail.com>
To: user@karaf.apache.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

I meant o.a.k.management.cfg's jmxRealm field

-D

On Wed, Jul 6, 2011 at 4:00 PM, Dan Tran <dantran@gmail.com> wrote:
> My be I can enhance o.a.k.management to disable user/pass
> authentication if the 'realm' field is empty?
>
> -D
>
> On Wed, Jul 6, 2011 at 2:53 PM, David Jencks <david_jencks@yahoo.com> wro=
te:
>> Hi Dan,
>>
>> I was thinking about this too recently.... geronimo has pretty much the =
same code for user/pw jmx auth and also client cert auth. =C2=A0Geronimo's =
user/pw code is slightly more functional than karaf's in that it provides l=
ogout functionality. =C2=A0At the moment it is not controlled by config adm=
in.
>>
>> If you'd like to take a look and repurpose the geronimo code its at
>>
>> https://svn.apache.org/repos/asf/geronimo/server/trunk/framework/modules=
/geronimo-jmx-remoting
>>
>> There's a bunch of GBeanInfoBuilder goo in there that is geronimo specif=
ic. =C2=A0Basically you should take it out after using it as a guide for wh=
at to expose via config admin.
>>
>> If I had time and were working on this :-) I would use Declarative Servi=
ces and write a component that depending on a flag in config admin would se=
t up either the user/pw jmx connector/authenticator or the client cert one,=
 looking for different properties in config admin for each. =C2=A0It's pres=
umably possible to do this with blueprint as well.
>>
>> hope this helps
>> david jencks
>>
>> On Jul 6, 2011, at 1:39 PM, Dan Tran wrote:
>>
>>> Hi I am in the process of getting my Karaf's JMX to accept only SSL
>>> with client certificate. =C2=A0But first, how do I turn off the normal
>>> user/password ( karaf/karaf ) authentication?
>>>
>>> the etc/o.a.k.management.cfg does not seem to provide a way to do just =
that.
>>>
>>> Thanks
>>>
>>>
>>> -Dan
>>
>>
>