gtully commented on PR #4820:
URL: 
https://github.com/apache/activemq-artemis/pull/4820#issuecomment-1954384492

   > Couple of question...
   > 
   > 1. One of the things that `management.xml` let you do was configure remote 
JMX connectivity. How do I do that with this?
   management.xml will remain, this will just replace the authorization 
section. 
   
   > 2. One nice thing about `management.xml` is that you didn't have to muck 
around with system properties. Any chance this could be configured via 
`broker.xml` instead of `javax.management.builder.initial`? Perhaps a new 
`<management>` block would be useful here.
   
   the system property is important because I want to guard the platform mbean 
server, and this is created on startup. Typically our logging causes it is be 
instantiated. When the platform mbean server is guarded and jolokia exposes it, 
the need for a jmx connector diminishes. With the management wrapper of the 
broker, we were late setting the guard in the past.  
   
   > 3. There is a fair bit of documentation about `management.xml` in 
`management.adoc`. Could you provide something analogous (or even more 
comprehensive) for this? A few simple use-cases with corresponding 
configuration would go a long way in helping users & developers understand how 
it works.
   
   sure. it is considerably simpler, with a mapping from objectName to address, 
and methods split into update or view permissions.
   
   > 4. The existing default `management.xml` has recommended settings (e.g. 
read-only access to non-Artemis MBeans). I think we should have something 
similar for this as well. Is that possible?
   
   that is a good idea, one thing that may get in the way is the default # 
security-settings-match. that will be applicable to jmx too but won't typically 
have the view role.
   
   but a security-settings-match jmx.# view role would do it.
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: gitbox-unsubscr...@activemq.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to