CODEWITHSUNDEEP
securityjboss
dragonmantank
dragonmantank

Reputation: 15456

Securing JBoss admin console

Anyone know of any good documentation on securing a JBoss installation? What I'm mainly looking at is disabling the admin console to only localhost or (even better) requiring authentication to access it.

Upvotes: 2

Views: 4761

Answers (3)

dragonmantank
dragonmantank

Reputation: 15456

It looks like this is in the community wiki, not that I found it the first time I searched:

http://www.jboss.org/community/wiki/SecureTheJmxConsole

Upvotes: 0

Jeremy Powell
Jeremy Powell

Reputation: 3486

Also, JBOSS has been evaluated under common criteria (EAL2+ I believe). This evaluation produces documentation regarding hardening. If you're really interested, Red Hat may provide you with that hardening guide if you ask them. (In Common Criteria terms, it would be called the 'Evaluated Configuration Guide')

Upvotes: 1

Sebastien
Sebastien

Reputation: 4305

This book has everything you need and it's very practical. Now it covers JBoss 4 if I remember right: http://www.amazon.com/JBoss-Developers-Notebook/dp/0596100078/ref=sr_1_1?ie=UTF8&qid=1250081509&sr=8-1

Upvotes: 0

Related Questions