Yea, I was looking at one of my GlassFish health checks that uses JMX client and it's using the GlassFish admin user and connecting via service:jmx:rmi:///jndi/rmi://myserver:28686/jmxrmi. I'd be fine using the manager-gui account since I'm using UserDatabase for that.
On Fri, Aug 5, 2016 at 1:11 PM, Romain Manni-Bucau <[email protected]> wrote: > in jaas you can define a list of loginmodules and use a "one match" > strategy, then question is how to check it is "local". One easy way can be > to have a local secret and test it as password, A kind of local admin only. > > > Romain Manni-Bucau > @rmannibucau <https://twitter.com/rmannibucau> | Blog > <https://blog-rmannibucau.rhcloud.com> | Old Wordpress Blog > <http://rmannibucau.wordpress.com> | Github <https://github.com/ > rmannibucau> | > LinkedIn <https://www.linkedin.com/in/rmannibucau> | Tomitriber > <http://www.tomitribe.com> | JavaEE Factory > <https://javaeefactory-rmannibucau.rhcloud.com> > > 2016-08-05 18:41 GMT+02:00 Steve Goldsmith <[email protected]>: > > > I'm configuring my auth via JDK params, so I'm not using a Tomcat realm. > > i.e. > > > > export CATALINA_OPTS="-Xmx1000m -Dfile.encoding=UTF-8 > > -Djava.awt.headless=true -Djava.rmi.server.hostname=myhost > > -Dcom.sun.management.jmxremote.login.config=Tomcat > > -Djava.security.auth.login.config=$CATALINA_HOME/conf/login.config > > -Dcom.sun.management.jmxremote.access.file=$ > CATALINA_HOME/conf/jmxremote. > > access > > -Dcom.sun.management.jmxremote.ssl=false" > > > > > > > > On Fri, Aug 5, 2016 at 12:10 PM, Romain Manni-Bucau < > [email protected] > > > > > wrote: > > > > > used a combinedrealm supporting either ldap or localhost access? > > > > > > > > > Romain Manni-Bucau > > > @rmannibucau <https://twitter.com/rmannibucau> | Blog > > > <https://blog-rmannibucau.rhcloud.com> | Old Wordpress Blog > > > <http://rmannibucau.wordpress.com> | Github <https://github.com/ > > > rmannibucau> | > > > LinkedIn <https://www.linkedin.com/in/rmannibucau> | Tomitriber > > > <http://www.tomitribe.com> | JavaEE Factory > > > <https://javaeefactory-rmannibucau.rhcloud.com> > > > > > > 2016-08-05 18:08 GMT+02:00 Steve Goldsmith <[email protected]>: > > > > > > > OK, thanks. It's really to log stats, so I only need local access. > > > Problem > > > > is I have server configured for LDAP auth which I do not want to do > > > > locally. > > > > > > > > On Fri, Aug 5, 2016 at 11:47 AM, Romain Manni-Bucau < > > > [email protected] > > > > > > > > > wrote: > > > > > > > > > Not in a portable way I think so options are likely: > > > > > - use JMX locally and expose it through another API (JAX-RS or > other) > > > > > - use some vendor API (like cache.getStatistics() for JCS) > > > > > > > > > > > > > > > Romain Manni-Bucau > > > > > @rmannibucau <https://twitter.com/rmannibucau> | Blog > > > > > <https://blog-rmannibucau.rhcloud.com> | Old Wordpress Blog > > > > > <http://rmannibucau.wordpress.com> | Github <https://github.com/ > > > > > rmannibucau> | > > > > > LinkedIn <https://www.linkedin.com/in/rmannibucau> | Tomitriber > > > > > <http://www.tomitribe.com> | JavaEE Factory > > > > > <https://javaeefactory-rmannibucau.rhcloud.com> > > > > > > > > > > 2016-08-05 16:59 GMT+02:00 sgjava <[email protected]>: > > > > > > > > > > > Is there a simple way to access a JCache cache statistics > without a > > > JMX > > > > > > client? I really only care about the current size. > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > View this message in context: http://tomee-openejb.979440. > > > > > > n4.nabble.com/JCache-stats-without-JMX-tp4679621.html > > > > > > Sent from the TomEE Users mailing list archive at Nabble.com. > > > > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > Steven P. Goldsmith > > > > > > > > > > > > > > > -- > > Steven P. Goldsmith > > > -- Steven P. Goldsmith
