jboss安全基本配置，禁用jmx、web console、status

1.改jmx、web-console密码/opt/jboss-4.2.3.GA/server/node1/conf/props

jbossws-users.properties 

jmx-console-users.properties

2.取消统计status：

/opt/jboss-4.2.3.GA/server/node1/deploy/jboss-web.deployer/ROOT.war/WEB-INF

下面web.xml

<!–

<servlet>

<servlet-name>Status Servlet</servlet-name>

<servlet-class>org.jboss.web.tomcat.service.StatusServlet</servlet-class>

</servlet>

<servlet-mapping>

<servlet-name>Status Servlet</servlet-name>

<url-pattern>/status</url-pattern>

</servlet-mapping>

–>

3.启用jmx密码管理：

/opt/jboss-4.2.3.GA/server/node1/deploy/jmx-console.war/WEB-INF

3.1. jboss-web.xml 取消注释： <security-domain>java:/jaas/jmx-console</security-domain>

3.2. web.xml 取消注释： <security-constraint>

4.启用web-console密码管理：

/opt/jboss-4.2.3.GA/server/node1/deploy/management/console-mgr.sar/web-console.war/WEB-INF

4.1.jboss-web.xml取消注释： <security-domain>java:/jaas/web-console</security-domain>

4.2.web.xml取消注释： <security-constraint>

本人新个人站点地址：http://sagacitytree.org/?p=145

欢迎各位莅临。