2014-12-05 75 views
0

我想爲Jetty中運行的hawtio配置安全性。在Jetty中配置hawtio安全。登錄失敗,因爲沒有配置爲hawtio的LoginModules

我跟着指示here但是當我嘗試驗證我的錯誤日誌中

WARN | qtp28021517-18 |登錄失敗,因爲空

沒有太多去繼續。

日誌並不表明任何明顯的。我能想到的唯一的事情就是啓用我在碼頭容器上進行的調試日誌記錄,但它對hawtio輸出沒有任何影響。

[[email protected] etc]$ tail -500f /opt/web/mybase/logs/2014_12_05.stderrout.log 
2014-12-05 14:46:09.519:INFO:oejs.Server:main: jetty-9.2.5.v20141112 
2014-12-05 14:46:09.541:INFO:oejdp.ScanningAppProvider:main: Deployment monitor [file:/opt/web/mybase/webapps/] at interval 1 
2014-12-05 14:46:11.037:INFO:oejw.StandardDescriptorProcessor:main: NO JSP Support for /hawtio, did not find org.apache.jasper.servlet.JspServlet 
INFO | main | Configuration will be discovered via system properties 
INFO | main | Welcome to hawtio 1.4.37 : http://hawt.io/ : Don't cha wish your console was hawt like me? ;-) 
INFO | main | Using file upload directory: /opt/jetty/temp/uploads 
WARN | main | No ConfigFacade constructed yet so using default configuration for now 
INFO | main | hawtio using config directory: /opt/jetty/temp/.hawtio/config 
INFO | main | Performing a pull in git repository /opt/jetty/temp/.hawtio/config on remote URL: https://github.com/hawtio/hawtio-config.git. Subsequent pull attempts will use debug logging 
WARN | main | Local JVM discovery disabled as this JVM cannot access com.sun.tools.attach.VirtualMachine due to: com/sun/tools/attach/VirtualMachine 
INFO | main | Starting hawtio authentication filter, JAAS realm: "hawtio" authorized role(s): "admin" role principal classes: "" 
2014-12-05 14:46:12.551:INFO:hawtio:main: jolokia-agent: Using access restrictor classpath:/jolokia-access.xml 
2014-12-05 14:46:12.629:INFO:oejsh.ContextHandler:main: Started [email protected]{/hawtio,file:/opt/jetty/temp/jetty-0.0.0.0-8282-hawtio.war-_hawtio-any-3488744180783766801.dir/webapp/,AVAILABLE}{/hawtio.war} 
2014-12-05 14:46:12.643:INFO:oejs.ServerConnector:main: Started [email protected]{HTTP/1.1}{0.0.0.0:8282} 
2014-12-05 14:46:12.643:INFO:oejs.Server:main: Started @3786ms 
WARN | qtp28021517-18 | Login failed due null 
+0

我認爲你可以啓用DEBUG/TRACE日誌記錄爲io.hawt和看到更多的細節。 – 2014-12-06 14:19:11

+0

AFAIR我們嘗試不記錄來自默認日誌配置的敏感信息,因此您需要啓用DEBUG/TRACE以查看更多信息。儘管「null」通常表示NPE例外 – 2014-12-06 14:20:03

回答

0

我們開始在我們的應用程序中嵌入Hawtio,但發現它對編譯和庫問題有點敏感。 因此,在我們想要監視的應用程序的命令行上使用Jolokia代理並在單獨的tomcat容器中使用Hawtio war文件更加容易。然後你可以使用標準的Tomcat安全