Return-Path: 
 <users-return-2220-apmail-qpid-users-archive=qpid.apache.org@qpid.apache.org>
Delivered-To: apmail-qpid-users-archive@www.apache.org
Received: (qmail 51975 invoked from network); 20 Nov 2009 19:30:57 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3)
  by minotaur.apache.org with SMTP; 20 Nov 2009 19:30:57 -0000
Received: (qmail 67547 invoked by uid 500); 20 Nov 2009 19:30:56 -0000
Delivered-To: apmail-qpid-users-archive@qpid.apache.org
Received: (qmail 67504 invoked by uid 500); 20 Nov 2009 19:30:56 -0000
Mailing-List: contact users-help@qpid.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@qpid.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@qpid.apache.org>
List-Post: <mailto:users@qpid.apache.org>
List-Id: <users.qpid.apache.org>
Reply-To: users@qpid.apache.org
Delivered-To: mailing list users@qpid.apache.org
Received: (qmail 67493 invoked by uid 99); 20 Nov 2009 19:30:56 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 20 Nov 2009 19:30:56 +0000
X-ASF-Spam-Status: No, hits=-0.0 required=10.0
	tests=SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of mbloore@gmail.com designates
 209.85.211.179 as permitted sender)
Received: from [209.85.211.179] (HELO mail-yw0-f179.google.com)
 (209.85.211.179)
    by apache.org (qpsmtpd/0.29) with ESMTP; Fri, 20 Nov 2009 19:30:47 +0000
Received: by ywh9 with SMTP id 9so3243148ywh.19
        for <users@qpid.apache.org>; Fri, 20 Nov 2009 11:30:26 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=domainkey-signature:mime-version:received:in-reply-to:references
         :from:date:message-id:subject:to:content-type
         :content-transfer-encoding;
        bh=ieGqaM0IxXObjbQRkvbO5QTrIIoaOiPWsun7i0HEboA=;
        b=WX7pitNvzOqBNg3aj6d/+Fm1b7AoZE3LKlqZooxJrYCKankoOMI8roVGA3BhgbqxyC
         H81YhCzYE2Z0qZGsFCUYcfWsTDK3N+J8SqU6z3SBIpTuE7B6STYJyADWFIxTFRAEn3g9
         Qvhn7z0kvZR5Vu/LZowDI1SGGGgnRks+qn+Fk=
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:from:date:message-id:subject:to
         :content-type:content-transfer-encoding;
        b=nrH+wSYf9vxkz+m3l1/Q0XdybC+eOdEeps1BAie+2SA4wXWMy/wQnZZ2PZyivLcZpa
         hGDK4KaJTOFS6cKxaTI617BW64/5j4TX7N9EGD0wMq3ohgD8jHvGcWE3XKAVwXPi+CsY
         pAYxxXcx7f9f6N8lZ1bhYoNcp6Ygb2vSanU2g=
MIME-Version: 1.0
Received: by 10.101.142.33 with SMTP id u33mr2700014ann.24.1258745424099;
 Fri,
	20 Nov 2009 11:30:24 -0800 (PST)
In-Reply-To: <f0d7fc830911200949g63d98785ma0fe0a0122efcc18@mail.gmail.com>
References: <d9425f7b0911110857p29aeceefw605ba01338267952@mail.gmail.com>
	<4afb361d.1701d00a.2238.ffffc152@mx.google.com>
 <d9425f7b0911200851s1dc35b68t577d13b2043c0f6c@mail.gmail.com>
	<f0d7fc830911200949g63d98785ma0fe0a0122efcc18@mail.gmail.com>
From: mARK bLOORE <mbloore@gmail.com>
Date: Fri, 20 Nov 2009 14:30:04 -0500
Message-ID: <d9425f7b0911201130n204b8008of810f08b484cbfae@mail.gmail.com>
Subject: Re: can't list in java cli
To: users@qpid.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Virus-Checked: Checked by ClamAV on apache.org

Thanks, Robbie, but I'm still getting
java.lang.NullPointerException
	at org.apache.qpid.management.ui.jmx.JMXServerRegistry.<init>(JMXServerReg=
istry.java:93)
	at org.apache.qpid.management.ui.views.NavigationView.createJMXServerConne=
ction(NavigationView.java:240)
	at org.apache.qpid.management.ui.views.NavigationView.addNewServer(Navigat=
ionView.java:301)
...
trying to connect to the remote broker.

I have tested both ports, and they are open.  My config is pretty
default, I just added my queues and upped their size, and of course
made my user an admin.  Is there anything else?


On Fri, Nov 20, 2009 at 12:49 PM, Robbie Gemmell
<robbie.gemmell@gmail.com> wrote:
> Yes, there is a second port you need to open, which is 100 higher than
> the jmxport listed in the configuration (8999 in your case, so 9099 is
> the other one you want).
>
> RMI based JMX actually requires 2 ports when used the way basically
> everyone uses it (an RMIConnectorServer JMX server advertised in an
> RMIRegistry), so the reason you are not getting connected is that the
> 2nd port (where the actual JMX Connector Server is listening) is still
> blocked and when the console tries connecting to it after retrieving
> its address from the registry it cant reach it. Prior to 0.5 this
> second port was randomly assigned in the ephemeral range by the JVM,
> but I modified it to an offset of the configured port (which is where
> the RMIRegistry is located) for 0.5 for exactly the situation you are
> in where the ports need to be known to be opened.
>
> Robbie
>
> 2009/11/20 mARK bLOORE <mbloore@gmail.com>:
>> Thanks Robbie. =A0That got me going on a local test broker, but I have
>> made the same access changes to the remote production server and I
>> still can't connect. =A0I opened port 8999/TCP in its firewall; do I
>> need to do anything else?
>>
>>
>> On Wed, Nov 11, 2009 at 5:09 PM, Robbie Gemmell
>> <robbie.gemmell@gmail.com> wrote:
>>> Ok, I have narrowed down the cause of the exception you are seeing.
>>>
>>> The problem in this case seems to be that you have used a user account =
which
>>> is valid, but does not have any management access rights. As a result, =
the
>>> CLI managed to establish a JMXConnector to the server, but as soon as y=
ou
>>> actually try to do something with it you get the SecurityException as y=
ou
>>> don't have permissions to invoke any operations.
>>>
>>> You need to edit the etc/jmxremote.access file in the broker configurat=
ion
>>> to give the user rights. It is of the format username=3Drights where ri=
ghts
>>> can be either readonly, readwrite, or admin. Readonly allows all
>>> non-modifying actions, readwrite also allows modifying actions, and adm=
in is
>>> the same but with access to additional management mbeans (though as far=
 as I
>>> know the CLI cant acually do anything that would require admin - in 0.5=
 this
>>> controls access rights to the ConfigurationManagement, UserManagement a=
nd
>>> LoggingManagement MBeans)
>>>
>>> Once that is done the CLI should be able to do stuff, though as ive not=
ed it
>>> has its issues (eg https://issues.apache.org/jira/browse/QPID-1878)
>>>
>>> Robbie
>>>
>>>> -----Original Message-----
>>>> From: mARK bLOORE [mailto:mbloore@gmail.com]
>>>> Sent: 11 November 2009 16:57
>>>> To: users@qpid.apache.org
>>>> Subject: can't list in java cli
>>>>
>>>> I am running the Java 0.5 broker and management tools. =A0In qpid-cli,
>>>> if I try to list any type of object, I get
>>>>
>>>> qpid-admin-$ queue list
>>>> java.lang.SecurityException: Access denied
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.server.management.MBeanInvocationHandlerImpl.invoke(MB=
e
>>>> anInvocationHandlerImpl.java:159)
>>>> =A0 =A0 =A0 at $Proxy7.queryNames(Unknown Source)
>>>> =A0 =A0 =A0 at
>>>> javax.management.remote.rmi.RMIConnectionImpl.doOperation(RMIConnectio=
n
>>>> Impl.java:1468)
>>>> =A0 =A0 =A0 at
>>>> javax.management.remote.rmi.RMIConnectionImpl.access$200(RMIConnection=
I
>>>> mpl.java:90)
>>>> =A0 =A0 =A0 at
>>>> javax.management.remote.rmi.RMIConnectionImpl$PrivilegedOperation.run(=
R
>>>> MIConnectionImpl.java:1284)
>>>> =A0 =A0 =A0 at java.security.AccessController.doPrivileged(Native Meth=
od)
>>>> =A0 =A0 =A0 at
>>>> javax.management.remote.rmi.RMIConnectionImpl.doPrivilegedOperation(RM=
I
>>>> ConnectionImpl.java:1389)
>>>> =A0 =A0 =A0 at
>>>> javax.management.remote.rmi.RMIConnectionImpl.queryNames(RMIConnection=
I
>>>> mpl.java:552)
>>>> =A0 =A0 =A0 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Met=
hod)
>>>> =A0 =A0 =A0 at
>>>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.j=
a
>>>> va:57)
>>>> =A0 =A0 =A0 at
>>>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccess=
o
>>>> rImpl.java:43)
>>>> =A0 =A0 =A0 at java.lang.reflect.Method.invoke(Method.java:616)
>>>> =A0 =A0 =A0 at
>>>> sun.rmi.server.UnicastServerRef.dispatch(UnicastServerRef.java:322)
>>>> =A0 =A0 =A0 at sun.rmi.transport.Transport$1.run(Transport.java:177)
>>>> =A0 =A0 =A0 at java.security.AccessController.doPrivileged(Native Meth=
od)
>>>> =A0 =A0 =A0 at sun.rmi.transport.Transport.serviceCall(Transport.java:=
173)
>>>> =A0 =A0 =A0 at
>>>> sun.rmi.transport.tcp.TCPTransport.handleMessages(TCPTransport.java:55=
3
>>>> )
>>>> =A0 =A0 =A0 at
>>>> sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport=
.
>>>> java:808)
>>>> =A0 =A0 =A0 at
>>>> sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.=
j
>>>> ava:667)
>>>> =A0 =A0 =A0 at
>>>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.j=
a
>>>> va:1110)
>>>> =A0 =A0 =A0 at
>>>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.=
j
>>>> ava:603)
>>>> =A0 =A0 =A0 at java.lang.Thread.run(Thread.java:636)
>>>> =A0 =A0 =A0 at
>>>> sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(StreamR=
e
>>>> moteCall.java:273)
>>>> =A0 =A0 =A0 at
>>>> sun.rmi.transport.StreamRemoteCall.executeCall(StreamRemoteCall.java:2=
5
>>>> 1)
>>>> =A0 =A0 =A0 at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:160)
>>>> =A0 =A0 =A0 at com.sun.jmx.remote.internal.PRef.invoke(Unknown Source)
>>>> =A0 =A0 =A0 at
>>>> javax.management.remote.rmi.RMIConnectionImpl_Stub.queryNames(Unknown
>>>> Source)
>>>> =A0 =A0 =A0 at
>>>> javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection.q=
u
>>>> eryNames(RMIConnector.java:829)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.commands.objects.ObjectNames.returnObjects(ObjectNames=
.
>>>> java:52)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.commands.Commandlist.listobjects(Commandlist.java:106)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.commands.Commandlist.execute(Commandlist.java:191)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.CommandExecutionEngine.runcommand(CommandExecutionEngi=
n
>>>> e.java:69)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.CommandLineInterpreter.main(CommandLineInterpreter.jav=
a
>>>> :170)
>>>> java.lang.NullPointerException
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.commands.Commandlist.listobjects(Commandlist.java:107)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.commands.Commandlist.execute(Commandlist.java:191)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.CommandExecutionEngine.runcommand(CommandExecutionEngi=
n
>>>> e.java:69)
>>>> =A0 =A0 =A0 at
>>>> org.apache.qpid.CommandLineInterpreter.main(CommandLineInterpreter.jav=
a
>>>> :170)
>>>> qpid-admin-$
>>>>
>>>>
>>>> What is wrong?
>>>>
>>>> --
>>>> mARK bLOORE <mbloore@gmail.com>
>>>>
>>>> ---------------------------------------------------------------------
>>>> Apache Qpid - AMQP Messaging Implementation
>>>> Project: =A0 =A0 =A0http://qpid.apache.org
>>>> Use/Interact: mailto:users-subscribe@qpid.apache.org
>>>
>>>
>>>
>>> ---------------------------------------------------------------------
>>> Apache Qpid - AMQP Messaging Implementation
>>> Project: =A0 =A0 =A0http://qpid.apache.org
>>> Use/Interact: mailto:users-subscribe@qpid.apache.org
>>>
>>>
>>
>>
>>
>> --
>> mARK bLOORE <mbloore@gmail.com>
>>
>> ---------------------------------------------------------------------
>> Apache Qpid - AMQP Messaging Implementation
>> Project: =A0 =A0 =A0http://qpid.apache.org
>> Use/Interact: mailto:users-subscribe@qpid.apache.org
>>
>>
>
> ---------------------------------------------------------------------
> Apache Qpid - AMQP Messaging Implementation
> Project: =A0 =A0 =A0http://qpid.apache.org
> Use/Interact: mailto:users-subscribe@qpid.apache.org
>
>



--=20
mARK bLOORE <mbloore@gmail.com>

---------------------------------------------------------------------
Apache Qpid - AMQP Messaging Implementation
Project:      http://qpid.apache.org
Use/Interact: mailto:users-subscribe@qpid.apache.org