-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chuck,

On 1/26/12 1:41 PM, Caldarale, Charles R wrote:
>> From: Christopher Schultz [mailto:ch...@christopherschultz.net] 
>> Subject: [OT] Inspecting JMX
> 
>> Should I just give up and use JmxRemoteLifecycleListener?
> 
> Yes.  You really aren't get to get anywhere on EC2 without it.

I figured since I was using localhost everything would stay there
anyway. I'll give JmxRemoteLifecycleListener a chance.

>> Should I hack the code for check_jmx to use the Attach API.
> 
> Maybe; might be fun.  (Always seemed to be a security hole to me
> :-)

I'm not sure you can disable it at the JVM level, can you? Actually, I
guess I could tell the JMX server to require a valid client cert, and
then just have an empty trust store :)

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk8hn08ACgkQ9CaO5/Lv0PCfoQCfThzcyl5sp9FAJ0f4RWcjTmUg
lSkAnAxZ2X9AowBCfgmkGWFzIgkMTLIh
=xQA4
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to