jdk/src/share/lib/management/jmxremote.password.template
author mullan
Mon, 10 Sep 2012 08:57:51 -0400
changeset 13791 059978b7e438
parent 2 90ce3da70b43
permissions -rw-r--r--
7195301: XML Signature DOM implementation should not use instanceof to determine type of Node Reviewed-by: xuelei
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     1
# ----------------------------------------------------------------------
90ce3da70b43 Initial load
duke
parents:
diff changeset
     2
#           Template for jmxremote.password
90ce3da70b43 Initial load
duke
parents:
diff changeset
     3
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
     4
# o Copy this template to jmxremote.password
90ce3da70b43 Initial load
duke
parents:
diff changeset
     5
# o Set the user/password entries in jmxremote.password
90ce3da70b43 Initial load
duke
parents:
diff changeset
     6
# o Change the permission of jmxremote.password to read-only
90ce3da70b43 Initial load
duke
parents:
diff changeset
     7
#   by the owner.
90ce3da70b43 Initial load
duke
parents:
diff changeset
     8
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
     9
# See below for the location of jmxremote.password file.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    10
# ----------------------------------------------------------------------
90ce3da70b43 Initial load
duke
parents:
diff changeset
    11
90ce3da70b43 Initial load
duke
parents:
diff changeset
    12
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    13
#        Password File for Remote JMX Monitoring
90ce3da70b43 Initial load
duke
parents:
diff changeset
    14
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    15
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    16
# Password file for Remote JMX API access to monitoring.  This
90ce3da70b43 Initial load
duke
parents:
diff changeset
    17
# file defines the different roles and their passwords.  The access
90ce3da70b43 Initial load
duke
parents:
diff changeset
    18
# control file (jmxremote.access by default) defines the allowed
90ce3da70b43 Initial load
duke
parents:
diff changeset
    19
# access for each role.  To be functional, a role must have an entry
90ce3da70b43 Initial load
duke
parents:
diff changeset
    20
# in both the password and the access files.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    21
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    22
# Default location of this file is $JRE/lib/management/jmxremote.password
90ce3da70b43 Initial load
duke
parents:
diff changeset
    23
# You can specify an alternate location by specifying a property in 
90ce3da70b43 Initial load
duke
parents:
diff changeset
    24
# the management config file $JRE/lib/management/management.properties
90ce3da70b43 Initial load
duke
parents:
diff changeset
    25
# or by specifying a system property (See that file for details).
90ce3da70b43 Initial load
duke
parents:
diff changeset
    26
90ce3da70b43 Initial load
duke
parents:
diff changeset
    27
90ce3da70b43 Initial load
duke
parents:
diff changeset
    28
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    29
#    File permissions of the jmxremote.password file
90ce3da70b43 Initial load
duke
parents:
diff changeset
    30
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    31
#      Since there are cleartext passwords stored in this file,
90ce3da70b43 Initial load
duke
parents:
diff changeset
    32
#      this file must be readable by ONLY the owner,
90ce3da70b43 Initial load
duke
parents:
diff changeset
    33
#      otherwise the program will exit with an error. 
90ce3da70b43 Initial load
duke
parents:
diff changeset
    34
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    35
# The file format for password and access files is syntactically the same
90ce3da70b43 Initial load
duke
parents:
diff changeset
    36
# as the Properties file format.  The syntax is described in the Javadoc
90ce3da70b43 Initial load
duke
parents:
diff changeset
    37
# for java.util.Properties.load.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    38
# Typical password file has multiple  lines, where each line is blank,
90ce3da70b43 Initial load
duke
parents:
diff changeset
    39
# a comment (like this one), or a password entry.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    40
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    41
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    42
# A password entry consists of a role name and an associated
90ce3da70b43 Initial load
duke
parents:
diff changeset
    43
# password.  The role name is any string that does not itself contain
90ce3da70b43 Initial load
duke
parents:
diff changeset
    44
# spaces or tabs.  The password is again any string that does not
90ce3da70b43 Initial load
duke
parents:
diff changeset
    45
# contain spaces or tabs.  Note that passwords appear in the clear in
90ce3da70b43 Initial load
duke
parents:
diff changeset
    46
# this file, so it is a good idea not to use valuable passwords.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    47
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    48
# A given role should have at most one entry in this file.  If a role
90ce3da70b43 Initial load
duke
parents:
diff changeset
    49
# has no entry, it has no access.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    50
# If multiple entries are found for the same role name, then the last one
90ce3da70b43 Initial load
duke
parents:
diff changeset
    51
# is used.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    52
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    53
# In a typical installation, this file can be read by anybody on the
90ce3da70b43 Initial load
duke
parents:
diff changeset
    54
# local machine, and possibly by people on other machines.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    55
# For # security, you should either restrict the access to this file,
90ce3da70b43 Initial load
duke
parents:
diff changeset
    56
# or specify another, less accessible file in the management config file
90ce3da70b43 Initial load
duke
parents:
diff changeset
    57
# as described above.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    58
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    59
# Following are two commented-out entries.  The "measureRole" role has
90ce3da70b43 Initial load
duke
parents:
diff changeset
    60
# password "QED".  The "controlRole" role has password "R&D".
90ce3da70b43 Initial load
duke
parents:
diff changeset
    61
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    62
# monitorRole  QED
90ce3da70b43 Initial load
duke
parents:
diff changeset
    63
# controlRole   R&D
90ce3da70b43 Initial load
duke
parents:
diff changeset
    64