Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-16613

jconsole does not show threads for Monitor role when rbac is enabled in EAP 7

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Won't Do
    • Icon: Minor Minor
    • None
    • 7.2.0.GA
    • JMX
    • None
    • Workaround Exists
    • Hide
      • Use the below JBoss CLI command to retrieve the thread information for Monitor role user:
      /core-service=platform-mbean/type=threading:read-resource(include-runtime=true)
      • The above information can also be retrieved via admin console :
        Runtime -> Host -> Status
      Show
      Use the below JBoss CLI command to retrieve the thread information for Monitor role user: /core-service=platform-mbean/type=threading:read-resource(include-runtime= true ) The above information can also be retrieved via admin console : Runtime -> Host -> Status
    • Hide

      1) Create a user using the add-user.sh script in EAP :

      ./add-user.sh testuser testuser123@

      2) Enable rbac in EAP and add the 'testuser' to Monitor role :

      /core-service=management/access=authorization:write-attribute(name=provider,value=rbac)
/core-service=management/access=authorization/role-mapping=Monitor:add
/core-service=management/access=authorization/role-mapping=Monitor/include=testuser:add(name=testuser, type=USER)

      3) Connect to jconsole using the service URL : service:jmx:remote+http://10.10.10.10:9990 and the credential testuser/testuser123@.

      4) The threads tab will not show peak threads (Attached screenshot jconsole.png).

      Show
      1) Create a user using the add-user.sh script in EAP : ./add-user.sh testuser testuser123@ 2) Enable rbac in EAP and add the 'testuser' to Monitor role : /core-service=management/access=authorization:write-attribute(name=provider,value=rbac) /core-service=management/access=authorization/role-mapping=Monitor:add /core-service=management/access=authorization/role-mapping=Monitor/include=testuser:add(name=testuser, type=USER) 3) Connect to jconsole using the service URL : service:jmx:remote+ http://10.10.10.10:9990 and the credential testuser/testuser123@. 4) The threads tab will not show peak threads (Attached screenshot jconsole.png).

      Jconsole is unable to show threads when logged in via user assigned to Monitor role(rbac enabled in EAP).

      The threads data is shown for users assigned to 'SuperUser' role.

        1. jconsole.png
          jconsole.png
          54 kB
        2. MBeanViaJMX.java
          1 kB

            rhn-support-iweiss Ingo Weiss
            rhn-support-sanaik Saisha Naik (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: