[
https://issues.apache.org/jira/browse/KARAF-6888?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17215740#comment-17215740
]
Matt Pavlovich edited comment on KARAF-6888 at 10/17/20, 4:45 AM:
------------------------------------------------------------------
PR created: https://github.com/apache/karaf/pull/1232
# [x] Built and tested against master
# [x] Tested connect via JMXMP
# [x] Test local jconsole using jmx:rmi (to confirm no regression)
# [x] management module unit tests pass ([INFO] Tests run: 56, Failures: 0,
Errors: 0, Skipped: 0)
# [x] Tested JMXMP with karaf in docker and JMXMP outside of docker
Note: Apologies ahead of time for the ugly refactor of JaasAuthenticator..
quick and dirty to get things working while juggling the Callback array.
Probably could use a second set of eyes to simplify.
was (Author: mattrpav):
PR created: https://github.com/apache/karaf/pull/1232
# [x] Built and tested against master
# [x] Tested connect via JMXMP
# [x] Test local jconsole using jmx:rmi (to confirm no regression)
# [x] management module unit tests pass ([INFO] Tests run: 56, Failures: 0,
Errors: 0, Skipped: 0)
# [x] Tested JMXMP with karaf in docker and JMXMP outside of docker
Note: Apologies ahead of time for the ugly refactor of JaasAuthenticator..
quick and dirty to get things working while juggling the Callback array.
> Sort out JMXMP authentication
> -----------------------------
>
> Key: KARAF-6888
> URL: https://issues.apache.org/jira/browse/KARAF-6888
> Project: Karaf
> Issue Type: Improvement
> Components: karaf
> Affects Versions: 4.2.9
> Reporter: Matt Pavlovich
> Assignee: Jean-Baptiste Onofré
> Priority: Major
> Attachments: ConnectorServerFactory.java, JMXMPClient.java,
> JaasAuthenticator.java, PlainSaslServer.java, jre.properties, karaf,
> org.apache.karaf.management.server-4.2.9.jar
>
>
> Out-of-the-box, karaf's jmxmp support doesn't seem to have a happy path. With
> the following changes, I'm able to get a list of JMX domains.
> Notes:
> 1. Probably need to support SASL/PLAIN to keep it simple to start, then add
> TLS
> 2. JDK's don't ship with a SASL/PLAIN Provider anymore, so we need the
> attached one is adapted from Apache Hive's implementation
> 3. The jmxmp classes and sasl modules need to be added to karaf startup and
> etc/jre.properties
> 4. Need to solve for a ClassNotFound error for legacy
> com/sun/jdmk/security/sasl/AuthenticateCallback that is not included in the
> jmxmp jar in the JaasAuthenticator.
> 5. Consider using the javax.management jar instead (as src jars are available
> for debugging)
> {noformat}
> <dependency>
> <groupId>javax.management</groupId>
> <artifactId>jmx-remote-optional-jmxmp</artifactId>
> <version>1.0-b06</version>
> </dependency>
> {noformat}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
