JBoss 远程控制安全，远程控制认证
1. 为jms-console加上认证
??? (1) 修改jboss4\server\default\deploy\jmx-console.war\WEB-INF下的web.xml和jboss-web.xml
????????? 在web.xml中把<security-constraint>的注释去掉
<security-constraint> <web-resource-collection> <web-resource-name>HtmlAdaptor</web-resource-name> <description>An example security config that only allows users with the role JBossAdmin to access the HTML JMX console web application </description> <url-pattern>/*</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <role-name>JBossAdmin</role-name> </auth-constraint> </security-constraint>?
?
?????????? 在jboss-web.xml中把<security-domain>注释去掉
?
<jboss-web> <!-- Uncomment the security-domain to enable security. You will need to edit the htmladaptor login configuration to setup the login modules used to authentication users. --> <security-domain>java:/jaas/jmx-console</security-domain></jboss-web>
?
???? (2) 修改jboss4\server\default\conf\props下的两个配置文件jmx-console-roles.properties和jmx-console-users.properties,添加或修改用户和密码
?
?
2. 为web-console加上认证
??? (1)? 修改jboss4\server\default\deploy\management\console-mgr.sar\web-console.war\WEB-INF下的web.xml和jboss-web.xml
?????????????? 在web.xml中把<security-constraint>的注释去掉
?
<security-constraint> <web-resource-collection> <web-resource-name>HtmlAdaptor</web-resource-name> <description>An example security config that only allows users with the role JBossAdmin to access the HTML JMX console web application </description> <url-pattern>/*</url-pattern> <http-method>GET</http-method> <http-method>POST</http-method> </web-resource-collection> <auth-constraint> <role-name>JBossAdmin</role-name> </auth-constraint> </security-constraint>
?
?? 在jboss-web.xml中把<security-domain>注释去掉
?
<jboss-web> <!-- Uncomment the security-domain to enable security. You will need to edit the htmladaptor login configuration to setup the login modules used to authentication users. --> <security-domain>java:/jaas/web-console</security-domain></jboss-web>
?
(2) 修改jboss4\server\default\deploy\management\console-mgr.sar\web-console.war\WEB-INF\classes
下的两个配置文件web-console-roles.properties和web-console-users.properties,添加或修改用户和密码
?
注：修改了用户名后，jmx-console-roles.properties和web-console-roles.properties 里面Role 对应的用户名也要修改；如果不对应进行修改是登录不了的。
?
