/* * Copyright (c) 2003, 2024, Oracle and/or its affiliates. All rights reserved. * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. * * This code is free software; you can redistribute it and/or modify it * under the terms of the GNU General Public License version 2 only, as * published by the Free Software Foundation. * * This code is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License * version 2 for more details (a copy is included in the LICENSE file that * accompanied this code). * * You should have received a copy of the GNU General Public License version * 2 along with this work; if not, write to the Free Software Foundation, * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. * * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA * or visit www.oracle.com if you need additional information or have any * questions. */ /* * @test * @bug 4924664 * @summary Tests the use of the "jmx.remote.x.password.file" and * "jmx.remote.x.access.file" environment map properties. * @author Luis-Miguel Alventosa * * @run clean PasswordAccessFileTest SimpleStandard SimpleStandardMBean * @run build PasswordAccessFileTest SimpleStandard SimpleStandardMBean * * @run main/othervm PasswordAccessFileTest */ import java.io.File; import java.util.HashMap; import javax.management.Attribute; import javax.management.MBeanServer; import javax.management.MBeanServerConnection; import javax.management.MBeanServerFactory; import javax.management.MBeanServerInvocationHandler; import javax.management.Notification; import javax.management.NotificationListener; import javax.management.ObjectName; import javax.management.remote.JMXConnector; import javax.management.remote.JMXConnectorFactory; import javax.management.remote.JMXConnectorServer; import javax.management.remote.JMXConnectorServerFactory; import javax.management.remote.JMXServiceURL; public class PasswordAccessFileTest { public static void main(String[] args) { try { //------------------------------------------------------------------ // SERVER //------------------------------------------------------------------ // Instantiate the MBean server // System.out.println("Create the MBean server"); MBeanServer mbs = MBeanServerFactory.createMBeanServer(); // Create SimpleStandard MBean // ObjectName mbeanName = new ObjectName("MBeans:type=SimpleStandard"); System.out.println("Create SimpleStandard MBean..."); mbs.createMBean("SimpleStandard", mbeanName, null, null); // Server's environment map // System.out.println(">>> Initialize the server's environment map"); HashMap sEnv = new HashMap(); // Provide the password file used by the connector server to // perform user authentication. The password file is a properties // based text file specifying username/password pairs. This // properties based password authenticator has been implemented // using the JMXAuthenticator interface and is passed to the // connector through the "jmx.remote.authenticator" property // in the map. // // This property is implementation-dependent and might not be // supported by all implementations of the JMX Remote API. // sEnv.put("jmx.remote.x.password.file", System.getProperty("test.src") + File.separator + "password.properties"); // Provide the access level file used by the connector server to // perform user authorization. The access level file is a properties // based text file specifying username/access level pairs where // access level is either "readonly" or "readwrite" access to the // MBeanServer operations. This properties based access control // checker has been implemented using the MBeanServerForwarder // interface which wraps the real MBean server inside an access // controller MBean server which performs the access control checks // before forwarding the requests to the real MBean server. // // This property is implementation-dependent and might not be // supported by all implementations of the JMX Remote API. // sEnv.put("jmx.remote.x.access.file", System.getProperty("test.src") + File.separator + "access.properties"); // Create an RMI connector server // System.out.println("Create an RMI connector server"); JMXServiceURL url = new JMXServiceURL("service:jmx:rmi://"); JMXConnectorServer cs = JMXConnectorServerFactory.newJMXConnectorServer(url, sEnv, mbs); // Start the RMI connector server // System.out.println("Start the RMI connector server"); cs.start(); System.out.println("RMI connector server successfully started"); System.out.println("Waiting for incoming connections..."); //------------------------------------------------------------------ // CLIENT : Invalid authentication credentials //------------------------------------------------------------------ final String invalidCreds[][] = { {"admin1", "adminPassword"}, {"admin", "adminPassword1"}, {"user1", "userPassword"}, {"user", "userPassword1"} }; // Try to connect to the server using the invalid credentials. // All the connect calls should get SecurityException. // for (int i = 0 ; i < invalidCreds.length ; i++) { // Client environment map // System.out.println(">>> Initialize the client environment map" + " for user [" + invalidCreds[i][0] + "] with password [" + invalidCreds[i][1] + "]"); HashMap cEnv = new HashMap(); cEnv.put("jmx.remote.credentials", invalidCreds[i]); // Create an RMI connector client and // connect it to the RMI connector server // System.out.println("Create an RMI connector client and " + "connect it to the RMI connector server"); try { JMXConnector jmxc = JMXConnectorFactory.connect(cs.getAddress(), cEnv); } catch (SecurityException e) { System.out.println("Got expected security exception: " + e); } catch (Exception e) { System.out.println("Got unexpected exception: " + e); e.printStackTrace(); System.exit(1); } } //------------------------------------------------------------------ // CLIENT (admin) //------------------------------------------------------------------ // Admin client environment map // String[] adminCreds = new String[] { "admin" , "adminPassword" }; System.out.println(">>> Initialize the client environment map for" + " user [" + adminCreds[0] + "] with " + "password [" + adminCreds[1] + "]"); HashMap adminEnv = new HashMap(); adminEnv.put("jmx.remote.credentials", adminCreds); // Create an RMI connector client and // connect it to the RMI connector server // System.out.println("Create an RMI connector client and " + "connect it to the RMI connector server"); JMXConnector adminConnector = JMXConnectorFactory.connect(cs.getAddress(), adminEnv); // Get an MBeanServerConnection // System.out.println("Get an MBeanServerConnection"); MBeanServerConnection adminConnection = adminConnector.getMBeanServerConnection(); // Get the proxy for the Simple MBean // SimpleStandardMBean adminProxy = (SimpleStandardMBean) MBeanServerInvocationHandler.newProxyInstance( adminConnection, mbeanName, SimpleStandardMBean.class, false); // Get State attribute // System.out.println("State = " + adminProxy.getState()); // Set State attribute // adminProxy.setState("changed state"); // Get State attribute // System.out.println("State = " + adminProxy.getState()); // Invoke "reset" in SimpleStandard MBean // System.out.println("Invoke reset() in SimpleStandard MBean..."); adminProxy.reset(); // Close MBeanServer connection // System.out.println("Close the admin connection to the server"); adminConnector.close(); //------------------------------------------------------------------ // CLIENT (user) //------------------------------------------------------------------ // User client environment map // String[] userCreds = new String[] { "user" , "userPassword" }; System.out.println(">>> Initialize the client environment map for" + " user [" + userCreds[0] + "] with " + "password [" + userCreds[1] + "]"); HashMap userEnv = new HashMap(); userEnv.put("jmx.remote.credentials", userCreds); // Create an RMI connector client and // connect it to the RMI connector server // System.out.println("Create an RMI connector client and " + "connect it to the RMI connector server"); JMXConnector userConnector = JMXConnectorFactory.connect(cs.getAddress(), userEnv); // Get an MBeanServerConnection // System.out.println("Get an MBeanServerConnection"); MBeanServerConnection userConnection = userConnector.getMBeanServerConnection(); // Get the proxy for the Simple MBean // SimpleStandardMBean userProxy = (SimpleStandardMBean) MBeanServerInvocationHandler.newProxyInstance( userConnection, mbeanName, SimpleStandardMBean.class, false); // Get State attribute // System.out.println("State = " + userProxy.getState()); // Set State attribute // try { userProxy.setState("changed state"); } catch (SecurityException e) { System.out.println("Got expected security exception: " + e); } catch (Exception e) { System.out.println("Got unexpected exception: " + e); e.printStackTrace(); System.exit(1); } // Get State attribute // System.out.println("State = " + userProxy.getState()); // Invoke "reset" in SimpleStandard MBean // try { System.out.println("Invoke reset() in SimpleStandard MBean..."); userProxy.reset(); } catch (SecurityException e) { System.out.println("Got expected security exception: " + e); } catch (Exception e) { System.out.println("Got unexpected exception: " + e); e.printStackTrace(); System.exit(1); } // Close MBeanServer connection // System.out.println("Close the user connection to the server"); userConnector.close(); //------------------------------------------------------------------ // SERVER //------------------------------------------------------------------ // Stop the connector server // System.out.println(">>> Stop the connector server"); cs.stop(); System.out.println("Bye! Bye!"); } catch (Exception e) { System.out.println("Got unexpected exception: " + e); e.printStackTrace(); System.exit(1); } } }