After installing the JBOSS Application
Server, the jmx console can be accessed by anybody without providing
any username/password. This is a big security risk as anybody can
perform changes though the jmx and web console. Setting up basic
username/password security for the jboss jmx/web console can be
accomplished by performing the following steps on the JBOSS Application
Server.
1. Edit $JBOSS_HOME/server/all/conf/props/jmx-console-users.properties to add jmx console users. Replace all
with your JBOSS profile name. The syntax to...