-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Chris,
On 12/9/19 17:10, Chris Cheshire wrote: > In CATALINA_BASE/bin/setenv.sh I have the following : > > CATALINA_OPTS="-Dcom.sun.management.jmxremote > -Dcom.sun.management.jmxremote.ssl=false > -Dcom.sun.management.jmxremote.authenticate=false" Okay. > In CATALINA_BASE/conf/server.xml I have a listener configured : > > <Listener > className="org.apache.catalina.mbeans.JmxRemoteLifecycleListener" > rmiRegistryPortPlatform="10001" rmiServerPortPlatform="10002" > useLocalPorts="true" /> > > > Upon startup I see in logs : INFO [main] > org.apache.catalina.mbeans.JmxRemoteLifecycleListener.createServer > The JMX Remote Listener has configured the registry on port > [10001] and the server on port [10002] for the [Platform] server > > > $ netstat -an | grep 10001 tcp4 0 0 127.0.0.1.10001 > *.* LISTEN tcp6 0 0 ::1.10001 > *.* LISTEN > > On my local machine I have a tunnel set up as follows : ssh -N > -L10001:localhost:10001 -L10002:localhost:10002 user@remotehost > > (where user is the user tomcat is running under) > > When I try to add a remote JMX connection in VisualVM on my client > machine to localhost:10001 I get an error dialog after a brief > delay with the message "Cannot connect to localhost:10001 using > service:jmx:rmi:///jndi/rmi://localhost:10001/jmxrmi". If I change > it to port 10002 I get the same error. On the server at this time > : $ netstat -an | grep 10001 tcp4 0 0 127.0.0.1.10001 > *.* LISTEN tcp6 0 0 ::1.10001 > *.* LISTEN tcp4 0 0 127.0.0.1.62637 > 127.0.0.1.10001 TIME_WAIT > > > If I try to use jconsole connecting to port 10001 I get the error > "Connection failed: non-JRMP server at remote endpoint". Connecting > to port 10002 I get the error "Connection failed: no such object > in table" You should be using the port defined by rmiRegistryPortPlatform, so 10001 is the correct port to use. > I've been through the tomcat configuration documentation a couple > times but I can't see what else I need to configure. What you have looks good to me without reproducing it myself. Can you do : $ netstat -an | grep 1000[0-9] ? Just to be sure about both ports? - -chris -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQIzBAEBCAAdFiEEMmKgYcQvxMe7tcJcHPApP6U8pFgFAl3vrsQACgkQHPApP6U8 pFjccg//RYofm1FSliR3L5WEqeyxfVrxD/w7HwASLCo61yLeJHz9bRcavv78wdlJ tQAyWtZMUkQlnct5398qLXrrwhUrmmkqKwn5qnKW5z2zwx7h53dTYgP6Zx/pDyRa 7zsCLtPulkb0kf+/5Ok7c43Qt8KLu1dEbQdjNuUKthHpESWW3yhNtH/QjEjIxU+l L0A8cNGq5XhvBgohCoDLdrqZLSBoqbWIOaunhfz2VBzzpqjDzJLdB9nBy8KRpxXk viSa4cMYwdc53sim0UZWm9HP58G1ZD/ZAi+2ES9BiqZqmP5Gbf+2a5ulyss1SYVP rfKg/dPAxX0BNVIwAYwxKdtm9kphgKwqHrh4NRydljqHNyaa4Hx8ncLFSFAVpCIN u57HIxAjX3LOtPAM0GON8ZnU4NVzZNtNb5y3gxtDHRBAurg4jIfufh08baLCBHmE BVR+WORNhxy6h8t1N+lyr9GDNraPyN7nEa9fLf679UilYUBr2UnCjL7f0UbH77sZ 32b/roteai1veoiw7+xiffV0Mb1+s86VfRxN5fuRhub2tko6uWY5PvDp5oVLZgKj vfF1EIQZPsoqSkc2d86M/0PsOMLWajeGAZ3TWRyrrQqZJEVBsopNWfECCawhIECT 7mQwQpk0AQAvBy3m+WcOkLD6Iva+xzMG3dN/azUILownSkGjZso= =QWRH -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org