I have added a management user using add-user.sh script. I see no option to remove it. How should it be done?
You can edit the mgmt-users.properties file in your domain or standalone's configuration directory to remove the line associated with the user.
Related
I have a requirement to disable access to jboss admin console. URL for that is http://[hostname]:[port]/admin-console/login.seam
Jboss version is jboss-eap-5.1
Operating System is Red Hat Enterprise Linux Server release 6.2 (Santiago)
I went through blogs/sites, but most of them are talking about enabling the security for console or managing the on-demand deployment. But this is not what we want. In our case, No user (internal/external) should be able to access the admin console.
few of them are:
https://docs.jboss.org/jbossas/6/Admin_Console_Guide/en-US/html/Administration_Console_User_Guide-Accessing_the_Console.html
https://www.outsystems.com/forums/discussion/10479/tip-activating-admin-console-and-jmx-console-in-jboss-5-x-and-securing-access/
This link talks about the same but for version 6x. which has different directory structure than 5x. https://access.redhat.com/solutions/192483
Please Help!!
You can disable the jmx console application.
To do it:
1 - Go to JBoss deploy folder
2 - Rename the folder jmx-console.war to jmx-console.war.rej
Or, you can remove the jmx-invoker service:
1 - Go to JBoss deploy folder
2 - Rename the file jmx-invoker-service.xml to jmx-invoker-service.xml.rej
Ps.: Renaming the files to '.rej' is just a way to see that the files are still there (But JBoss will ignore). You can as well delete these files/folders I mentioned.
We have finally decided how to fix this (credit to Elvis Rocha also for giving the suggestion).
For this, we have made changes at jboss level to disable below URLs
1) To disable https://<host>:<port>/admin-console/login.seam - Rename “admin-console.war” file as “admin-console_disabled” under location <jboss_home>/server/<server_name>/deploy
2) To disable https://<host>:<port>/jmx-console - Rename “jmx-console.war” file as “jmx-console_disabled” under location <jboss_home>/server/<server_name>/deploy
3) To disable https://<host>:<port> - Rename “index.html” file as “index_disabled” under location <jboss_home>/server/<server_name>/deploy/ROOT.war
Note - Remember that these are for jboss version 5.1. If you have any other version then file and path might change accordingly.
i know that the default profile name when i installed websphere was Appsrv01, I want to create my own AppSrv02 but the location of my IBM Websphere was in C: and i dont have any write permission, i dont have any admin rights also..
using COMMAND-LINE, I want to make my profile folder to be writable, so that my newly created AppSrv02 will be list down in the profile names in my RAD.
Please help me. Thanks
So that's your problem. In order to have a usable profile in WAS, your user must have write permissions. See this link from WAS ND infocenter, it applies to WAS standalone too.
http://www.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.installation.nd.doc/ae/tpro_manage_nonroot.html
If you cannot change the write permissions to this profile, you'll need to create your own. For this, you can either use WAS Profile Management Tool, WAS CLI or you can create your profile using the Configure profiles... link in the WAS server creation wizard you posted. I'd use the RAD way because RAD validates, within the IDE, the proper permissions that you need to create and use the profile within RAD.
First check whether you have admin rights or not if your using User/Guest profile, by creating any new folder in C drive where IBM WAS is installed.
If you have Admin rights, than right click on RAD run as administrator. It should work fine.
If Profile doesnt show up in drop down, Configure new profile and try checking that way.
If you dont have Admin rights better install RAD in any local drive other than C
Running Eclipse with Admin rights and removing the read-only tick for the AppServXX folder/WAS folder couldn't help me... cause I copied the WAS server from another PC :). So for those of you who want to move / migrate your development environment:
I did a search inside the copied WAS, Eclipse and the project's workspace folder for their old paths (with Total Commander, feed the results into a list) and dragged all the files (except the log ones) into my editor (NotePad++) and did a replace in all open documents for the new paths. It's a bit lucrative, but it took only 10 minutes for me and afterwards the WAS server in Eclipse showed the correct profile and it also did start up well.
I have a sesame server running deployed in a WildFly 8.2.0 final container.
How can I restrict access to some particular URLs?
I know I have to edit some XML files (deployment descriptor and some other files) but I don't know which files and where to find them.
I figured it out my self.
Step 1:
Open the openrdf-sesame.war with Total Commander or any file archiver. Go the WEB-INF folder and open the web.xml file.
Edit the web.xml file by adding constraints, roles and the login-config tag as in this example : http://www.rivuli-development.com/further-reading/sesame-cookbook/basic-security-with-http-authentication/
Save the edited file within the archive and redeploy the openrdf-sesame.war file containing the modified web.xml file.
Step 2:
Go to the WildFly folder and enter the bin directory and run the add-user.bat file.
Choose b) Application User and hit Enter.
Enter a username and a password for the new user.
When you are asked "What groups do you want this user to belong to?", type in one of the roles you have created in the web.xml file and hit Enter.
When asked “is this new user going to be used for one AS process to connect to another AS process?” type “yes” and hit Enter.
And that's all.
You now have youre particular URL's restricted.
I have java ee6 web profile sdk & I am using eclipse ee. I installed Glassfish plugin for eclipse using Download additional server adapters in the New Server wizard. Now during building a test app, eclipse raise this error glassfish\domains\domain1 does not exist. Whats the reason & how can I remove it?
Either your eclipse glassfish plugin points to the wrong domain or your server has no domain although there should be at least a default domain which is usually named domain1.
Check what's the name of your domain in glassfish-install-dir\glassfish\domains directory. If there is no subdir, you can create a domain with the asadmin tool:
glassfish-install-dir\bin\asadmin create-domain your-domain-name
See this description of the create-domain command.
If you already have a domain with a different name than domain1, you have to reconfigure your eclipse glassfish plugin. (Since I don't use eclipse, I can't take you any further. But I remember a BalusC tutorial on this topic).
Go to <Glassfish-install-directory>/glassfish/config directory.
Edit asenv and point to your JDK installation for set AS_JAVA=C:\Java\jdk.
Now you should be able to run asadmin.
Create a new domain using asadmin create-domain domain1 (inside bin directory).
Server setup in eclipse will now find your newly created domain.
I ran into this same problem and fixed it with the following:
Open a command prompt and browse to C:\glassfish3\glassfish\bin (or whatever your glassfish directory is)
Execute asadmin
Type in create-domain --adminport 4848 domain1 (your debug port can probably be whatever)
Go back into Eclipse and continue
Although late reply, but may be useful to someone facing similar issues.
If no domain exists in your glassfish path i.e say C:\glassfish4\glassfish\domains\ then you can create a new domain in the same path as follows:
Navigate to C:\glassfish4\bin\ directory and double click on asadmin.bat. It will open a command prompt as asadmin >
Type the following command asadmin > create-domain --adminport 4848 domain1
Click Enter repeatedly to keep the default settings viz. username (admin) password and other things.
That's it. You will find the domain1 created under C:\glassfish4\glassfish\domains\ directory with all default configurations.
If want to create domain in another directory or want some more info then can refer Oracle Glassfish Reference Manual:
http://docs.oracle.com/cd/E19798-01/821-1758/create-domain-1/index.html
Eclipse doesn't have domain path setting for glassfish server. This error comes when domain path is not correct. Make sure when you run your application on eclipse give glassfish credentials user/password
In my case, the C:\glassfish4\glassfish\domains\domain1\config\ domain.xml was renamed to something like domain568912323464576456.xml, so I edited the file, leaving it as it supposed to be named and done, server started up again.
create a new domain with
asadmin create-domain myDomain
add the path of this new domain, if there is a message "domain is not valid", make the folder domains/myDomain/conf permission to not only the root. If there is the message "is not writtable" then open Eclipse as root and try again. This should be work in these cases.
You must to add a password to your admin user. Eclipse mistake. Eclipse doesn't recognise the domain without admin password.
When you create the domain, add a admin user and a password and Eclipse doesn't complain any more.
How & where to change fix upload permitions for joomla.
After installation of the plugin or module, i have no rights to edit file/directory.
thnx
You need to either enable the FTP layer and put in your username and password so that Joomla can create new directories with the proper permissions or you need to get a host that runs PHP as a CGI. The latter is preferable as the FTP layer is considered a security risk.
By default, Joomla will try to fix the permissions of files and directories during the install process, but it is not always successful depending on the server configuration. One of these 2 methods should fix your issue with future installs.