OK, checking the mailing list archive I see that the relevant thread is "Want to
know about SSL with JOnas" (Dec 2000).
It seems that jonas.rmi.port will not be available until 2.2.5 so for now I'll
patch the server code using Weibock Maximilian's modified RemoteObject.
Joe
Joe Gittings wrote:
> Yes I am running the registry and the Jonas EJB server in different virtual
> machines, so I guess the first explanation is the correct one.
>
> Actually, on rerunning the system today it seems that port 3068 was chosen at
> random (I just happened to get it several times running previously). So how do
> I set this port to a fixed value? (so we can configure the firewall for it).
>
> In other words, java.naming.provider.url plus the argument to the registry
> script allow me to configure the port used by the registry. How do I configure
> the port used by the EJB server to a fixed value? We can't open every port to
> this machine on the firewall!
>
> With thanks,
> Joe
>
> Bruno Dumant wrote:
>
> > Hi,
> >
> > Sorry, but 3068 is not the "well known" port of any service in Jonathan. To
> > check whether this connection is really opened by Jonathan (which is
> > certainly the case), just run your server with the
> > -Djonathan.tcpcip.verbose=true option.
> >
> > If you run the registry and your application in different virtual machines,
> > you normally need two connections, one for the registry, the other for the
> > your server.
> >
> > If it is not the case, I can see one (untested) reason for Jonathan opening
> > several connections. The execution in Jonathan is represented by a Kernel
> > object, storing the different properties of the Jonathan services. Jonathan
> > 2.x is not very clever at finding out whether two Kernels are different
> > form the viewpoint of a given service, and simply checks the equality of
> > the Kernels. This may lead to the unnecessary duplication of some services,
> > including protocols. Jonathan 3.x does a better job and only duplicates
> > services when necessary.
> >
> > Best regards,
> >
> > Bruno
> >
> > Joe Gittings wrote:
> >
> > > Hi,
> > >
> > > We're doing some firewall configuration here, to expose my (properly
> > > secured :) EJB server to the outside world.
> > >
> > > I've been surprised to find that as well as the port specified in
> > > java.naming.provider.url, it appears to be necessary to open port 3068.
> > > Every client connection to the EJB server is accompanied by an active
> > > TCP connection on this port. When I try accessing the EJB server from
> > > outside the firewall, client connections to the EJB server fail if port
> > > 3068 is not open in the firewall.
> > >
> > > For this firewall testing, I am using a previous release of my software
> > > running on Jonas 2.1.1 (Jeremie). [So far I've only moved my current
> > > development build to 2.2.4].
> > >
> > > The real mystery is, I've searched the whole of the Jonas 2.2.1
> > > installation including the source, and all the source for Jonathan
> > > 2.0.1, for the string "3068" and found nothing! I also tried searching
> > > the objectweb site for "3068" and found no matches. (Unfortunately it
> > > appears that ht://Dig does not search correctly for numbers, since doing
> > > a search for "1099" also returns no matches!)
> > >
> > > My guess is that this port is used by one of the services in Jonathan.
> > > But it would be nice to be able to look our sysadmin in the eye and tell
> > > him exactly what. Does anyone know?
> > >
> > > Joe
> > >
> > > ----
> > > To unsubscribe, send email to [EMAIL PROTECTED] and
> > > include in the body of the message "unsubscribe jonas-users".
> > > For general help, send email to [EMAIL PROTECTED] and
> > > include in the body of the message "help".
> >
> > --
> > *******************************************************************
> > Bruno Dumant
> > Kelua
> > 9 rue de la Brocardière
> > 69570 Dardilly - France
> >
> > tel: +33 4 37 49 63 94
> > fax: +33 4 37 49 63 91
> > *******************************************************************
>
> ----
> To unsubscribe, send email to [EMAIL PROTECTED] and
> include in the body of the message "unsubscribe jonas-users".
> For general help, send email to [EMAIL PROTECTED] and
> include in the body of the message "help".
----
To unsubscribe, send email to [EMAIL PROTECTED] and
include in the body of the message "unsubscribe jonas-users".
For general help, send email to [EMAIL PROTECTED] and
include in the body of the message "help".
