|
|||||||||||||||||
![]() |
|||||||||||||||||
|
Security for the systems management APIs is implemented by using authentication for clients when the jmxConnect API is called and by an appropriate JAAS security policy.
When a client calls the jmxConnect API, the client needs to pass an appName and passPhrase. This appName and passPhrase pair is checked against a credentials database that the EWLM JMX agent maintains. If the appName and passPhrase pair is defined in the credentials database, then a jmxConnector is created and associated with that jmxConnector is an authenticated JAAS principal. If the appName and passPhrase pair does not match anything in the credentials database, an IOException is returned to the client.
The JAAS security policy is used by the Javaâ„¢ security manager to enforce fine grain control of which authenticated principals can have access to the systems management APIs. Principals that should have access to the systems management APIs should have a grant entry defined for them in the EWLM JAAS security policy.
More at IBM