Replacing default Realm in Geronimo

Administering Security

Using SPNEGO in Geronimo

The RMI(Remote Method Invocation) is used to invoke methods or an object in another Java Virtual Machine from a certain port. You can easily secure the default RMI port of the Geronimo server as followed.

1. In directory of <Geronimo_HOME>/var/config, you can find the file config.xml. Take Geronimo 3.0 as an example, make modifications listed below.

   Elements by default	Elements modified
   <gbean name="JMXService">	<gbean name="JMXService" load="false">
   <module name="org.apache.geronimo.framework/jmx-security/3.0/car" load="false">	<module name="org.apache.geronimo.framework/jmx-security/3.0/car">

2. Save the changes, and start the server with the JMX-security module loaded. (After the configuration of secure JMX server, the JMX-security module will be loaded at server start time automatically.)