-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Jakub,
On 4/7/13 5:58 AM, Jakub 1983 wrote: > why do I have to enable jmx with command > > *set CATALINA_OPTS=-Dcom.sun.management.jmxremote \ > -Dcom.sun.management.jmxremote.port=%my.jmx.port% \ > -Dcom.sun.management.jmxremote.ssl=false \ > -Dcom.sun.management.jmxremote.authenticate=false* > > > http://tomcat.apache.org/tomcat-7.0-doc/monitoring.html > > even when I run it *under java 6* ? in java 6 jmx is active by > default (it is active when I run my own main), I cannot see how it > is disabled by default by tomcat start scripts, but when I run > default startup, I cannot connect with jconsole, when I set > CATALINA_OPTS as above, it works fine, but why doesn't it work > without it ? The above configuration sets up *remote* JMX management. JMX is always enabled, and you can connect from localhost (as the same user, or root) using tools like jvisualvm, etc. without specifying any of the stuff above. Note that enabling remote authentication with authentication disabled (and SSL disabled, too!) is pretty much a terrible idea: anyone can connect to your server and do all sorts of evil things. Of course, firewalls, etc. can be configured to restrict access, but it's generally a good idea to also restrict access via password and encrypt the traffic from the remote host to the server. Thanks, - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJRYZXfAAoJEBzwKT+lPKRYLlkP/3ue8hSLskZwyZIWxBbbltzH 5M5pWhSaViWAGxsszvx7BFqRQEUYOgndGl/TUsRNSc6rM/RQ2Gcq603/G22dsmLv uM5IPnKV7D8Sk3g/qbG/b8kbPy2s+5d1QlEZF0gKVHbIS21uNmnhUyJE/KqjU858 lZmSNpfcSmtR0In+7BPDsy9QFGswkSQu7ZQdfGxhnIdTlbgIhFYz3+acHbC3hYpL BW0hvgUNyUjJ3SvjzHpAaociXP8HyQPfWooj/aWOex2rgi+5D5LfxlBI2qfXDGj0 4gakMIUq+ONBHSFBEp3HcaS2BzUWbZ2gpghHFurQOdbrwXA/etfkC4ksiTsh2utU M/k5wQ3XcpmuWjnWga6ATXWiFIiv8g+nhAl2mkl2bwkWPcrOPTK5O9WFA12zQaIZ w202VopEQOqx6qlivaNQA1xXbM6SN7ZV3DjO+SMValuSMAllQ5LoueaL37lTTZIA kGJ8+XonoN4GFBZ7snaL+mGtKTxykUjgg/s01eaOh4RL1NFrFRMPWy30JI4hQ8l/ DhJ8vv+ZKeoEqRvmCCfCB05tyWEgRG1qIS0AQTU+A5f70WRRkTJGvC16GMypn+kJ +ioIdomkadTQsydkyxVEzTU6jagGSn8Xu0s/xUzQEXyM72/ausjZoOp5CaDCvr4o Yjg2+7lZ5IVcAHO5Zgcz =z+Y8 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org