Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add more security to MXPR #57

Closed
alexott opened this issue Jul 5, 2019 · 5 comments
Closed

Add more security to MXPR #57

alexott opened this issue Jul 5, 2019 · 5 comments

Comments

@alexott
Copy link
Contributor

alexott commented Jul 5, 2019

it would be nice to add more security tomxpr, for example, ability to specify user name & password for remote connection.

It would be also useful to add SSL, but it could be too much work.

@aragozin
Copy link
Owner

aragozin commented Jul 5, 2019

mxpr is reusing JMX dacility from JDK so add all the stuff vanila JMX have is not a big deal.

Though, my intent for mxpr was quick and dirty solution. If you want it right it would be probably better to setup JMX property on target JVM.

Am I missing some other useful cases for mxpr

@alexott
Copy link
Contributor Author

alexott commented Jul 5, 2019

I understand, I'm planning to use it as quick and dirty for solution when customer doesn't setup stuff in advance, and restarting/reconfiguring is not an option...

I'll look, if it's possible to do at all, and come with PR if I can :-)

@aragozin
Copy link
Owner

aragozin commented Jul 5, 2019

Oh, one more think. You can do mxpr work with jcmd for JDK (no shady jars from internet required).
Here is my cheetsheet for JDK tools it has an example https://training.ragozin.info/collateral/JDK_tools_cheatsheet.pdf

jcmd have all security options available.

The only issue with jcmd - in some rare situations JVM RMI port on some their adapter making forwaring of JMX through SSH impossible. So I keep mxpr for such cases.

@alexott
Copy link
Contributor Author

alexott commented Jul 5, 2019

Thank you very much for cheatsheet!

@aragozin
Copy link
Owner

wont fix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants