RE: demo site

Hi,

> I have a demo site for an application of mine (unrelated to 
> Jmx or MX4J), and it's been very successful at bringing new 
> users in.  Instead of reading about what a product can do, or 
> following a list of instructions to run samples, they just go 
> to the site and run a working installation.
> 
> I wanted to do this for my http/html adaptor, and the same 
> exact thing could be used to exemplify the MX4J adaptors, as 
> well as letting people actually use the example MBeans in the 
> Guide (well... those that work).  The MX4J home page, the 
> Guide, and possibly package/overview pages of API, could have 
> links to the demo site.

This would be plain great !

> The problem is, security.  

[snip]

JSR 160 connector server can run under a security manager, and the specification allows you to fine-tune the security.
You can, for example, write a HTML front end that uses JSR 160 rmi connector that connects to a security-manager running connector server.

As far as I can see this is the only way to allow anyone to perform actions on the server, but restrict the server to certains operations only.

For example, you can specify that the connector server can only register MBean of classes com.simpson.* and you can show a bunch of them in the gui.

Running under a security manager means that any sensitive operation can be restricted: opening sockets, reading files, creating classloaders, and so on.

I think the architecture can be:

JVM 1
The web container and the JSR 160 client
No security manager
web.xml configured to restrict access to resources, or to force login.

JVM 2
JSR 160 connector server
Running under security manager
security file restrict operations as needed.

browser --> web server | jsr160 client --> jsr160 server

Explanation of how to set it up is here (I know, it can be improved ;)
http://mx4j.sourceforge.net/docs/ch03s09.html

I'll be glad to help you in the process.

What do you think ?

Thanks !

Simon


-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id56&alloc_id438&op=click