title: Securing JMXConnectorServerService (jmx-remoting.sar) in JBoss 5.1.0.GA
body: <p>I've been trying to understand how to secure the JMXConnectorServerService offered by JBoss 5.1.0.GA by default.</p>
  
  <p>Currently, if I paste the following URL into JConsole, I can get to JMX directly without any authentication: service:jmx:rmi:///jndi/rmi://:1290/jmxconnector</p>
  
  <p>Then I did this to secure my JMXInvoker in hopes that that would secure all JMX access: <a href="http://objectopia.com/2009/10/01/securing-jmx-invoker-layer-in-jboss/" rel="nofollow">http://objectopia.com/2009/10/01/securing-jmx-invoker-layer-in-jboss/</a></p>
  
  <p>But, apparently, that doesn't apply to the JMXConnectorServerService. I can still get to JMX using the the above service URL through jconsole.</p>
  
  <p>Then I found out about this feature request that hasn't been accommodated yet: <a href="https://issues.jboss.org/browse/JBAS-8159" rel="nofollow">https://issues.jboss.org/browse/JBAS-8159</a></p>
  
  <p>Now, presently I'm not worried about crazy security measures. This URL is not gonna be exposed to the outside network. So, I just want to see what's the simplest way for me to secure the jmx-remoting.sar with the "jmx-console" security domain?</p>
  
  <p>I could switch to the default MBean server, but apparently, in 5.1.0.GA, that's a pain: <a href="https://community.jboss.org/thread/153594" rel="nofollow">https://community.jboss.org/thread/153594</a></p>
  
  <p>I'd really appreciate any input in this regard.</p>
  
  <p>Thanks!</p>