[ 
https://issues.apache.org/jira/browse/KARAF-3147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14580106#comment-14580106
 ] 

Freeman Fang commented on KARAF-3147:
-------------------------------------

We are in the container so can't see the in-jvm local jmx operation as the safe 
one. Especially the karaf RBAC is fine-grained so we can define different roles 
for different operations.

For an instance we don't wanna the Deployer role(like install bundle) can do 
anything the SuperUser role can do(like delete instances), but if a Deployer 
delploy a bundle through the local jmx operation it can do anything, that's why 
we also need secure the local operation.

> Local JMX connect is not possible
> ---------------------------------
>
>                 Key: KARAF-3147
>                 URL: https://issues.apache.org/jira/browse/KARAF-3147
>             Project: Karaf
>          Issue Type: Bug
>          Components: karaf-core
>    Affects Versions: 3.0.1
>         Environment: OS X, JDK 7
>            Reporter: Achim Nierbeck
>            Assignee: Jean-Baptiste Onofré
>            Priority: Critical
>             Fix For: 3.0.4, 4.0.0.M3, 2.4.3
>
>
> With neither local process nor with remote jmx connection 
> {code}
> service:jmx:rmi://0.0.0.0:44444/jndi/rmi://0.0.0.0:1099/karaf-root
> {code}
> it's possible to connect to Karaf via JMX. 
> Neither JConsole nor VisualVM is usable. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to