JBoss jmx-console and web-console for JBoss 4.0

[Quattro]

I am the new guy for some networking components which is closely related to servlet.I want to know more about Jboss components which is used to perform the security for applications.The term used in this section jmx-console and web-console,what is the purpose of both of the components and related documentation is needed for me to solve my confusion.

[Spyrus]

There are two components named jmx-console and web-console are standard servlet 2.3 deployments for JBoss Application Server which is used for J2EE role based security. Both components contains the procedure to enable the security using username/password/role mappings found in the jmx-console.war and web-console.war.

The security setup is controlled with the help of two segemnts, the standard WEB-INF/web.xml servlet URI to role specification and another one WEB-INF/jboss-web.xml description of the JAAS configuration which specifies the authentication and role mapping is activities.

[Snake08]

You can keep secure the JMX Console component using a username/password file.The task can be possibly performed to edit the WEB-INF sections properties.There are some steps to perform this.Take a look here -

1- Locate the jmx-console.war folder that is stored in ${jboss.server.home.dir}/deploy directory of the system.
2- Edit the file named WEB-INF/web.xml and uncomment the security-constraint section.
3- Edit the properties section WEB-INF/classes/jmx-console-users.properties and WEB-INF/classes/jmx-console-roles.properties .Now you need to change the users name and passwords according to you. The user would become JBossAdmin to run the JMX Console.
4- Edit the properties section of WEB-INF/jboss-web.xml and edit the comment of security-domain section.

[Zachary]

The JMX invokers are the starting points for the MBean Server.If you need to restrict the external access for the MBean Server so you need to use the invokers for security purpose.

You also requires to enable it and If you use JBoss and nicely did the secure operation for JMX Console and Web Console which is so much close with it.The httpha-invoker.sar can be accessed in the deploy directory is a service that provides RMI/HTTP access for EJBs and the JNDI Naming service.

[Big Fish]

To use the default JBoss version of twiddle.sh which is located in the bin directory associated with the JBoss home directory against the default JNP location of JBoss which is as localhost:1099.

Suppose,you are in the bin directory of JBoss Home and execute the following command to set the system property.

./twiddle.sh -s localhost:1099 invoke "jboss:type=Service,name=SystemProperties" set myprop mypropvalue