如何在Jboss-eap-5.1中禁用对jboss管理控制台的访问

Question

I have a requirement to disable access to jboss admin console. URL for that is http://[hostname]:[port]/admin-console/login.seam

Jboss version is jboss-eap-5.1

Operating System is Red Hat Enterprise Linux Server release 6.2 (Santiago)

I went through blogs/sites, but most of them are talking about enabling the security for console or managing the on-demand deployment. But this is not what we want. In our case, No user (internal/external) should be able to access the admin console.

few of them are:

https://docs.jboss.org/jbossas/6/Admin_Console_Guide/en-US/html/Administration_Console_User_Guide-Accessing_the_Console.html

https://www.outsystems.com/forums/discussion/10479/tip-activating-admin-console-and-jmx-console-in-jboss-5-x-and-securing-access/

This link talks about the same but for version 6x. which has different directory structure than 5x. https://access.redhat.com/solutions/192483

Please Help!!

Answer 1

You can disable the jmx console application. To do it:

1 - Go to JBoss deploy folder

2 - Rename the folder jmx-console.war to jmx-console.war.rej

Or, you can remove the jmx-invoker service:

1 - Go to JBoss deploy folder

2 - Rename the file jmx-invoker-service.xml to jmx-invoker-service.xml.rej

Ps.: Renaming the files to '.rej' is just a way to see that the files are still there (But JBoss will ignore). You can as well delete these files/folders I mentioned.

Answer 2

We have finally decided how to fix this (credit to Elvis Rocha also for giving the suggestion).

For this, we have made changes at jboss level to disable below URLs

1) To disable https://<host>:<port>/admin-console/login.seam - Rename “admin-console.war” file as “admin-console_disabled” under location <jboss_home>/server/<server_name>/deploy

2) To disable https://<host>:<port>/jmx-console - Rename “jmx-console.war” file as “jmx-console_disabled” under location <jboss_home>/server/<server_name>/deploy

3) To disable https://<host>:<port> - Rename “index.html” file as “index_disabled” under location <jboss_home>/server/<server_name>/deploy/ROOT.war

Note - Remember that these are for jboss version 5.1. If you have any other version then file and path might change accordingly.