WildFly Management Interfaces: Difference between revisions

From NovaOrdis Knowledge Base
Jump to navigation Jump to search
No edit summary
Line 19: Line 19:


=Security=
=Security=
Core Management Authentication is responsible for securing the Management API interfaces. Core Management Authentication is built into the core management and it is enabled and configured as a [core service|JBoss7Services#CoreServices] by default.
 
Core management authentication is responsible for securing the management API interfaces. Core management authentication is built into the core management and it is enabled and configured as a [[https://home.feodorov.com:9443/wiki/Wiki.jsp?page=JBoss7Services|core service]] by default.


The Management APIs relies on the [Management Realm|JBoss7SecurityRealm#ManagementRealm] for authentication and authorization needs: in order to access the Management API functionality, an user need to authenticate against the Management Realm.
The Management APIs relies on the [Management Realm|JBoss7SecurityRealm#ManagementRealm] for authentication and authorization needs: in order to access the Management API functionality, an user need to authenticate against the Management Realm.

Revision as of 00:19, 10 February 2016

Internal

Overview

WildFly core management functionality is exposed via two different management interfaces (the terms management interfaces and management APIs are used interchangeably):

These two interfaces offer distinct ways to access the same core management system.

Diagram

Configuration

WildFly Management Interface Configuration

Security

Core management authentication is responsible for securing the management API interfaces. Core management authentication is built into the core management and it is enabled and configured as a [service] by default.

The Management APIs relies on the [Management Realm|JBoss7SecurityRealm#ManagementRealm] for authentication and authorization needs: in order to access the Management API functionality, an user need to authenticate against the Management Realm.

By default, no roles are required to access the Management APIs.

JMX Management Beans

The management API is also exposed as JMX Management Beans. These Management Beans are referred to as core mbeans. Prior to WildFly, the management functionality was primarily JMX based. With WildFly, the core management does not rely on JMX to perform operations, JMX exposed beans are now just an alternative mechanism, in addition to the native and HTTP interfaces. [JBoss7 Remoting#JBossRemotingAndJMXAccess].

TODO: