Configuring Remote Access from JMX Clients
The Windchill Configuration Assistant prompts you to configure the server manager to allow remote access from JMX clients, such as JConsole. Such clients can be used to interact with the Windchill MBeans to manage and monitor the application. However, to connect using a JMX client from a remote workstation, you must configure additional Windchill properties.
Two modes of access are supported:
• Authenticated
When configuring authenticated remote access, the assistant creates two users named monitorRole and controlRole and assigns each a password. Both of these users must have an entry in the JDK jmxremote.access file found at <JRE>/lib/management/jmxremote.access:
◦ The monitorRole provides read-only access.
◦ The controlRole is granted read-write access.
Remote users must supply one of the two role names and the associated password to gain access to Windchill MBeans. The user names and passwords for the two roles are written to a file named <Windchill>/Windchill/jmxremote.password and that file is referenced by properties on the server manager java command line.
• Anonymous
When anonymous remote access is enabled, any remote client can connect without supplying a user name or password.
|
|
Anonymous users are granted unrestricted access.
|
The following example shows the prompts that are displayed to set up authenticated remote access:
[input] Do you want to enable authenticated (non SSL) remote JMX access to the ServerManager(y/n)? (y, [n])
y
[echo] Configuring authenticated remote JMX access
[input] servermanager monitor role name: [monitorRole]
[input] servermanager monitor role password: [bigBrother15]
[input] servermanager control role name: [controlRole]
[input] servermanager control role password: [autoCrat100]
