[
https://issues.apache.org/jira/browse/HBASE-2152?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12803488#action_12803488
]
Gary Helmling commented on HBASE-2152:
--------------------------------------
Yes, you can monitor local processes without a password. You can also disable
password checking for remote processes by setting
com.sun.management.jmxremote.authenticate=false.
It is true that the default hbase-env.sh references these files in comments:
{code}
# Uncomment and adjust/create "jmxremote.*" to enable JMX exporting
# export HBASE_JMX_BASE="-Dcom.sun.management.jmxremote.ssl=false"
# export HBASE_JMX_BASE="$HBASE_JMX_BASE
-Dcom.sun.management.jmxremote.password.file=$HBASE_HOME/conf/jmxremote.password"
# export HBASE_JMX_BASE="$HBASE_JMX_BASE
-Dcom.sun.management.jmxremote.access.file=$HBASE_HOME/conf/jmxremote.access"
# export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS $HBASE_JMX_BASE
-Dcom.sun.management.jmxremote.port=10101"
...
{code}
So it is a bit confusing to refer to the files when they're not there by
default.
We could change this to simply reference the default files in the JRE. Those
will already exist with sample formats. The only problem there is that java
wants the password file to only have permissions of "600" and be owned the the
user account running the process. Which often won't mesh for people running
hbase (JDK owned by root, Hadoop/HBase running as normal user).
So in that case, we could change the default hbase-env.sh to something like:
{code}
# Uncomment and adjust to enable JMX exporting
# See jmxremote.password and jmxremote.access in $JRE_HOME/lib/management to
configure remote password access.
# More details at:
http://java.sun.com/javase/6/docs/technotes/guides/management/agent.html
#
# export HBASE_JMX_BASE="-Dcom.sun.management.jmxremote.ssl=false"
# export HBASE_MASTER_OPTS="$HBASE_MASTER_OPTS $HBASE_JMX_BASE
-Dcom.sun.management.jmxremote.port=10101"
...
{code}
> Add default jmxremote.{access|password} files into conf
> -------------------------------------------------------
>
> Key: HBASE-2152
> URL: https://issues.apache.org/jira/browse/HBASE-2152
> Project: Hadoop HBase
> Issue Type: Improvement
> Affects Versions: 0.20.4, 0.21.0
> Reporter: Lars George
> Assignee: Lars George
> Fix For: 0.20.4, 0.21.0
>
> Attachments: HBASE-2152.patch
>
>
> If there are no objections I would like to commit these two default files.
> They go along with the earlier added JMX setting in hbase-env.sh.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
