| /* |
| * Copyright (c) 2003, 2015, Oracle and/or its affiliates. All rights reserved. |
| * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
| * |
| * This code is free software; you can redistribute it and/or modify it |
| * under the terms of the GNU General Public License version 2 only, as |
| * published by the Free Software Foundation. |
| * |
| * This code is distributed in the hope that it will be useful, but WITHOUT |
| * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
| * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
| * version 2 for more details (a copy is included in the LICENSE file that |
| * accompanied this code). |
| * |
| * You should have received a copy of the GNU General Public License version |
| * 2 along with this work; if not, write to the Free Software Foundation, |
| * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
| * |
| * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
| * or visit www.oracle.com if you need additional information or have any |
| * questions. |
| */ |
| |
| /* |
| * @test |
| * @bug 4924664 |
| * @summary Tests the use of the "jmx.remote.x.password.file" and |
| * "jmx.remote.x.access.file" environment map properties. |
| * @author Luis-Miguel Alventosa |
| * |
| * @run clean PasswordAccessFileTest SimpleStandard SimpleStandardMBean |
| * @run build PasswordAccessFileTest SimpleStandard SimpleStandardMBean |
| * @run main PasswordAccessFileTest |
| */ |
| |
| import java.io.File; |
| import java.util.HashMap; |
| import javax.management.Attribute; |
| import javax.management.MBeanServer; |
| import javax.management.MBeanServerConnection; |
| import javax.management.MBeanServerFactory; |
| import javax.management.MBeanServerInvocationHandler; |
| import javax.management.Notification; |
| import javax.management.NotificationListener; |
| import javax.management.ObjectName; |
| import javax.management.remote.JMXConnector; |
| import javax.management.remote.JMXConnectorFactory; |
| import javax.management.remote.JMXConnectorServer; |
| import javax.management.remote.JMXConnectorServerFactory; |
| import javax.management.remote.JMXServiceURL; |
| |
| public class PasswordAccessFileTest { |
| |
| public static void main(String[] args) { |
| try { |
| //------------------------------------------------------------------ |
| // SERVER |
| //------------------------------------------------------------------ |
| |
| // Instantiate the MBean server |
| // |
| System.out.println("Create the MBean server"); |
| MBeanServer mbs = MBeanServerFactory.createMBeanServer(); |
| |
| // Create SimpleStandard MBean |
| // |
| ObjectName mbeanName = new ObjectName("MBeans:type=SimpleStandard"); |
| System.out.println("Create SimpleStandard MBean..."); |
| mbs.createMBean("SimpleStandard", mbeanName, null, null); |
| |
| // Server's environment map |
| // |
| System.out.println(">>> Initialize the server's environment map"); |
| HashMap sEnv = new HashMap(); |
| |
| // Provide the password file used by the connector server to |
| // perform user authentication. The password file is a properties |
| // based text file specifying username/password pairs. This |
| // properties based password authenticator has been implemented |
| // using the JMXAuthenticator interface and is passed to the |
| // connector through the "jmx.remote.authenticator" property |
| // in the map. |
| // |
| // This property is implementation-dependent and might not be |
| // supported by all implementations of the JMX Remote API. |
| // |
| sEnv.put("jmx.remote.x.password.file", |
| System.getProperty("test.src") + |
| File.separator + |
| "password.properties"); |
| |
| // Provide the access level file used by the connector server to |
| // perform user authorization. The access level file is a properties |
| // based text file specifying username/access level pairs where |
| // access level is either "readonly" or "readwrite" access to the |
| // MBeanServer operations. This properties based access control |
| // checker has been implemented using the MBeanServerForwarder |
| // interface which wraps the real MBean server inside an access |
| // controller MBean server which performs the access control checks |
| // before forwarding the requests to the real MBean server. |
| // |
| // This property is implementation-dependent and might not be |
| // supported by all implementations of the JMX Remote API. |
| // |
| sEnv.put("jmx.remote.x.access.file", |
| System.getProperty("test.src") + |
| File.separator + |
| "access.properties"); |
| |
| // Create an RMI connector server |
| // |
| System.out.println("Create an RMI connector server"); |
| JMXServiceURL url = new JMXServiceURL("service:jmx:rmi://"); |
| JMXConnectorServer cs = |
| JMXConnectorServerFactory.newJMXConnectorServer(url, sEnv, mbs); |
| |
| // Start the RMI connector server |
| // |
| System.out.println("Start the RMI connector server"); |
| cs.start(); |
| System.out.println("RMI connector server successfully started"); |
| System.out.println("Waiting for incoming connections..."); |
| |
| //------------------------------------------------------------------ |
| // CLIENT : Invalid authentication credentials |
| //------------------------------------------------------------------ |
| |
| final String invalidCreds[][] = { |
| {"admin1", "adminPassword"}, |
| {"admin", "adminPassword1"}, |
| {"user1", "userPassword"}, |
| {"user", "userPassword1"} |
| }; |
| |
| // Try to connect to the server using the invalid credentials. |
| // All the connect calls should get SecurityException. |
| // |
| for (int i = 0 ; i < invalidCreds.length ; i++) { |
| // Client environment map |
| // |
| System.out.println(">>> Initialize the client environment map" + |
| " for user [" + |
| invalidCreds[i][0] + |
| "] with password [" + |
| invalidCreds[i][1] + "]"); |
| HashMap cEnv = new HashMap(); |
| cEnv.put("jmx.remote.credentials", invalidCreds[i]); |
| |
| // Create an RMI connector client and |
| // connect it to the RMI connector server |
| // |
| System.out.println("Create an RMI connector client and " + |
| "connect it to the RMI connector server"); |
| try { |
| JMXConnector jmxc = |
| JMXConnectorFactory.connect(cs.getAddress(), cEnv); |
| } catch (SecurityException e) { |
| System.out.println("Got expected security exception: " + e); |
| } catch (Exception e) { |
| System.out.println("Got unexpected exception: " + e); |
| e.printStackTrace(); |
| System.exit(1); |
| } |
| } |
| |
| //------------------------------------------------------------------ |
| // CLIENT (admin) |
| //------------------------------------------------------------------ |
| |
| // Admin client environment map |
| // |
| String[] adminCreds = new String[] { "admin" , "adminPassword" }; |
| System.out.println(">>> Initialize the client environment map for" + |
| " user [" + adminCreds[0] + "] with " + |
| "password [" + adminCreds[1] + "]"); |
| HashMap adminEnv = new HashMap(); |
| adminEnv.put("jmx.remote.credentials", adminCreds); |
| |
| // Create an RMI connector client and |
| // connect it to the RMI connector server |
| // |
| System.out.println("Create an RMI connector client and " + |
| "connect it to the RMI connector server"); |
| JMXConnector adminConnector = |
| JMXConnectorFactory.connect(cs.getAddress(), adminEnv); |
| |
| // Get an MBeanServerConnection |
| // |
| System.out.println("Get an MBeanServerConnection"); |
| MBeanServerConnection adminConnection = |
| adminConnector.getMBeanServerConnection(); |
| |
| // Get the proxy for the Simple MBean |
| // |
| SimpleStandardMBean adminProxy = (SimpleStandardMBean) |
| MBeanServerInvocationHandler.newProxyInstance( |
| adminConnection, |
| mbeanName, |
| SimpleStandardMBean.class, |
| false); |
| |
| // Get State attribute |
| // |
| System.out.println("State = " + adminProxy.getState()); |
| |
| // Set State attribute |
| // |
| adminProxy.setState("changed state"); |
| |
| // Get State attribute |
| // |
| System.out.println("State = " + adminProxy.getState()); |
| |
| // Invoke "reset" in SimpleStandard MBean |
| // |
| System.out.println("Invoke reset() in SimpleStandard MBean..."); |
| adminProxy.reset(); |
| |
| // Close MBeanServer connection |
| // |
| System.out.println("Close the admin connection to the server"); |
| adminConnector.close(); |
| |
| //------------------------------------------------------------------ |
| // CLIENT (user) |
| //------------------------------------------------------------------ |
| |
| // User client environment map |
| // |
| String[] userCreds = new String[] { "user" , "userPassword" }; |
| System.out.println(">>> Initialize the client environment map for" + |
| " user [" + userCreds[0] + "] with " + |
| "password [" + userCreds[1] + "]"); |
| HashMap userEnv = new HashMap(); |
| userEnv.put("jmx.remote.credentials", userCreds); |
| |
| // Create an RMI connector client and |
| // connect it to the RMI connector server |
| // |
| System.out.println("Create an RMI connector client and " + |
| "connect it to the RMI connector server"); |
| JMXConnector userConnector = |
| JMXConnectorFactory.connect(cs.getAddress(), userEnv); |
| |
| // Get an MBeanServerConnection |
| // |
| System.out.println("Get an MBeanServerConnection"); |
| MBeanServerConnection userConnection = |
| userConnector.getMBeanServerConnection(); |
| |
| // Get the proxy for the Simple MBean |
| // |
| SimpleStandardMBean userProxy = (SimpleStandardMBean) |
| MBeanServerInvocationHandler.newProxyInstance( |
| userConnection, |
| mbeanName, |
| SimpleStandardMBean.class, |
| false); |
| |
| // Get State attribute |
| // |
| System.out.println("State = " + userProxy.getState()); |
| |
| // Set State attribute |
| // |
| try { |
| userProxy.setState("changed state"); |
| } catch (SecurityException e) { |
| System.out.println("Got expected security exception: " + e); |
| } catch (Exception e) { |
| System.out.println("Got unexpected exception: " + e); |
| e.printStackTrace(); |
| System.exit(1); |
| } |
| |
| // Get State attribute |
| // |
| System.out.println("State = " + userProxy.getState()); |
| |
| // Invoke "reset" in SimpleStandard MBean |
| // |
| try { |
| System.out.println("Invoke reset() in SimpleStandard MBean..."); |
| userProxy.reset(); |
| } catch (SecurityException e) { |
| System.out.println("Got expected security exception: " + e); |
| } catch (Exception e) { |
| System.out.println("Got unexpected exception: " + e); |
| e.printStackTrace(); |
| System.exit(1); |
| } |
| |
| // Close MBeanServer connection |
| // |
| System.out.println("Close the user connection to the server"); |
| userConnector.close(); |
| |
| //------------------------------------------------------------------ |
| // SERVER |
| //------------------------------------------------------------------ |
| |
| // Stop the connector server |
| // |
| System.out.println(">>> Stop the connector server"); |
| cs.stop(); |
| |
| System.out.println("Bye! Bye!"); |
| } catch (Exception e) { |
| System.out.println("Got unexpected exception: " + e); |
| e.printStackTrace(); |
| System.exit(1); |
| } |
| } |
| } |
