tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: tomcat jmx disabled by default ?
Date Sun, 07 Apr 2013 15:50:57 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Jakub,

On 4/7/13 5:58 AM, Jakub 1983 wrote:
> why do I have to enable jmx with command
> 
> *set CATALINA_OPTS=-Dcom.sun.management.jmxremote \ 
> -Dcom.sun.management.jmxremote.port=%my.jmx.port% \ 
> -Dcom.sun.management.jmxremote.ssl=false \ 
> -Dcom.sun.management.jmxremote.authenticate=false*
> 
> 
> http://tomcat.apache.org/tomcat-7.0-doc/monitoring.html
> 
> even when I run it *under java 6* ? in java 6 jmx is active by
> default (it is active when I run my own main), I cannot see how it
> is disabled by default by tomcat start scripts, but when I run
> default startup, I cannot connect with jconsole, when I set
> CATALINA_OPTS as above, it works fine, but why doesn't it work
> without it ?

The above configuration sets up *remote* JMX management. JMX is always
enabled, and you can connect from localhost (as the same user, or
root) using tools like jvisualvm, etc. without specifying any of the
stuff above.

Note that enabling remote authentication with authentication disabled
(and SSL disabled, too!) is pretty much a terrible idea: anyone can
connect to your server and do all sorts of evil things.

Of course, firewalls, etc. can be configured to restrict access, but
it's generally a good idea to also restrict access via password and
encrypt the traffic from the remote host to the server.

Thanks,
- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=z+Y8
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message