-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cédric,
On 12/11/12 7:50 AM, Cédric Couralet wrote: > In our tomcat, we use at the moment the JMXRemoteLifecycleListener > configured as : > > <Listener > className="org.apache.catalina.mbeans.JmxRemoteLifecycleListener" > rmiRegistryPortPlatform="10001" rmiServerPortPlatform="10002" > useLocalPorts="true" /> Okay. > Now for my problems or questions: - Apparently, the Jmx listener > listens on 0.0.0.0 (confirmed by a netstat) on the two ports > configured for the listener, is it normal ? I thought that > useLocalPorts would restrain the listening only to 127.0.0.1. useLocalePorts /should/ force 127.0.0.1 (actually "localhost"... whatever that resolves to on your server). Can you confirm that you are editing the correct server.xml? If you edit it in one place and then deploy it, please make sure you have the latest version installed under CATALINA_BASE/conf. > - with jvisualvm i am able to connect through jmx with the url > service:jmx:rmi://localhost:10002/jndi/rmi://localhost:10001/jmxrmi > > without entering the credentials (nagios:nagios). > I thought that by entering > com.sun.management.jmxremote.authenticate=true, even read access > would be restricted. I think you need to double-check that you are actually using the configuration you think you are. Another note: using traditional JMX with Nagios is going to suck. You are probably going to make, say, 5 connections to your server every minute to check on things like heap size, request-time, etc. Each of those connections requires a complete JMX connection which is not cheap to make -- especially if the client is running on the same server. That's 5 JVMs, 5 JMX connections, etc. every minute (or 5 or whatever). If you just want to make some quick checks, consider looking at the JMXProxyServlet which is provided by the manager webapp. I believe it will be a much lighter-weight solution (and does not require all of this crazy setup to configure JMX authentication, etc.). - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEAREIAAYFAlDHUKcACgkQ9CaO5/Lv0PCYVgCfdhcR80DY4nO1QTHCnohhBul8 pmMAn0J1tFmswgyMAd4AXQBKyfNTMb1u =BzhT -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
