Re: success

Bordet, Simone wrote:
> Hi,
> 
> 
>>     http://admc.com:8080/jmxhtml/jmx
>>
>>I still need to optimize the policy files for both standalone
>>and web-app demo sites.
> 
> 
> I have browsed the site, and again I can stop the MBeanServerInterceptorConfigurator :)
> Don't know if it is only a matter of fixing the policy files, just be aware that that operation should be forbidden.

Known.

>>My original purpose was to show off the mx4j HTTP Adaptor and
>>give the public access to live instances of the mx4j sample
>>MBeans.  It seems to me like this can be accomplished more
>>simply by running a HttpAdaptor under a security manager.  I
>>see no advantage to the 2-tier web app approach for this goal.
> 
> 
> Sure, 1 tier is simpler.
> Last time I tried to run a web container under a SecurityManager I gave up, since the security coding of the container was not even considered: I had to grant so many permission to the starter codebase that the security manager was kinda useless.

When one runs HttpAdaptor, there is no separate "web container".  HttpAdaptor
serves http itself, i.e., it is standalone.  After getting the policy file
figured out, it was trivial getting my own http adaptor running under a
security manager, and I expect it will be trivial getting the mx4j HttpAdaptor
running under one, since I already have a policy file to start with.

> It will be interesting to see the policy files you used with Tomcat 5.

Why do you think I will be running Tomcat with policy files?  With our
2-tier scheme, a web app runs on Tomcat with no security manager, and the
ConnectorServer runs with security manager in another JVM.  With the
1-tier approach that I am suggesting (and that has been running at
http://admc.com:8111/jmx for days now), a standalone Java process runs
an adaptor that serves httpd (with no app server involvement at all).

Seems like you are assuming the need for a web app server.  The whole
point to my discussion on this is that I see no need for a web
app server at all, since our goals (of showing off HttpAdaptor and
giving access to sample MBeans) is fully satisfied more simply without
a web app server.

> Simon


-- 
Don't pray in my school, and I won't think in your church.
ICF:  703-934-3692       Cell:  703-944-9317


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click