James Server
  1. James Server
  2. JAMES-1104

Disable user/pass auth on JMX and bind it to localhost

    Details

    • Type: Task Task
    • Status: Resolved
    • Priority: Major Major
    • Resolution: Fixed
    • Affects Version/s: 3.0-M1
    • Fix Version/s: 3.0-M2
    • Component/s: None
    • Labels:
      None

      Description

      Using JMX user/password auth on windows is a PITA because of the needed modification on fileownership etc. We should just disable user/password auth,bind jmx to localhost and add a NOTE about this

      1. chmod600.vbs
        2 kB
        Israel Tsadok

        Activity

        Hide
        Eric Charles added a comment -

        On my windows 7, the execution of the scripts takes around 10 seconds. Is it normal?

        I have put chmod600.vbs in the bin dir of James on windows 7 and called it from james.bat.
        Script was applied, but it still was refusing to start.
        FATAL | wrapper | 2010/11/05 11:16:05 | OpenSCManager failed - Access is denied. (0x5)
        Nothing more in log file, but I suppose there is still a problem with the permissions...

        However, via run.bat, james was starting correctly. That's a good step.

        We will probably cut a M2 milestone with no pwd and binding-only from localhost to temporary unlock the issue.
        In the meantime, it would be great if you could try on you side to integrate the script in james.bat and look at the time it takes (maybe somethinig specific to my pc ?)
        Tks

        Show
        Eric Charles added a comment - On my windows 7, the execution of the scripts takes around 10 seconds. Is it normal? I have put chmod600.vbs in the bin dir of James on windows 7 and called it from james.bat. Script was applied, but it still was refusing to start. FATAL | wrapper | 2010/11/05 11:16:05 | OpenSCManager failed - Access is denied. (0x5) Nothing more in log file, but I suppose there is still a problem with the permissions... However, via run.bat, james was starting correctly. That's a good step. We will probably cut a M2 milestone with no pwd and binding-only from localhost to temporary unlock the issue. In the meantime, it would be great if you could try on you side to integrate the script in james.bat and look at the time it takes (maybe somethinig specific to my pc ?) Tks
        Hide
        Israel Tsadok added a comment -

        The attached script will take ownership and limit the permissions on the give file path to <Current_User>:Full Control.
        Usage:

        cscript chmod600.vbs ..\conf\jmx.password

        It doesn't have much in the way of error handling, but if this approach is accepted, I'll be willing to work on it some more.

        The idea is to call the script from run.bat, which will ensure that the permissions on jmx.password are set properly, allowing james to run.

        I tested the script on Windows 7 and Windows XP SP3. In theory, it should work all the way back to Windows 2000.

        Show
        Israel Tsadok added a comment - The attached script will take ownership and limit the permissions on the give file path to <Current_User>:Full Control. Usage: cscript chmod600.vbs ..\conf\jmx.password It doesn't have much in the way of error handling, but if this approach is accepted, I'll be willing to work on it some more. The idea is to call the script from run.bat, which will ensure that the permissions on jmx.password are set properly, allowing james to run. I tested the script on Windows 7 and Windows XP SP3. In theory, it should work all the way back to Windows 2000.

          People

          • Assignee:
            Norman Maurer
            Reporter:
            Norman Maurer
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development