When passing *gemfire.jmx-manager-access-file" and "gemfire.jmx-manager-password-file" you are to enable authentication for the JMX manager and so why it is working as expected with GFSH. For applications, you have to implement and include a "Security Manager".
https://geode.apache.org/docs/guide/18/managing/security/implementing_authentication.html Sai On Mon, Apr 1, 2019 at 3:44 PM Claudiu Balciza <cbalc...@1wa.org> wrote: > I’m trying to secure a geode node. Single node for the time being. > > I start both the locator and the server with > --J=-Dgemfire.jmx-manager-access-file=access.list > --J=-Dgemfire.jmx-manager-password-file=user.list > > From GFSH I can only connect to the locator with the correct user/pwd > > But from the application I can connect without any authentication. > > What am I doing wrong? > > > > Claudiu Balcîza > > >