management.properties 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332
  1. #####################################################################
  2. # Default Configuration File for Java Platform Management
  3. #####################################################################
  4. #
  5. # The Management Configuration file (in java.util.Properties format)
  6. # will be read if one of the following system properties is set:
  7. # -Dcom.sun.management.jmxremote.port=<port-number>
  8. # or -Dcom.sun.management.snmp.port=<port-number>
  9. # or -Dcom.sun.management.config.file=<this-file>
  10. #
  11. # The default Management Configuration file is:
  12. #
  13. # $JRE/lib/management/management.properties
  14. #
  15. # Another location for the Management Configuration File can be specified
  16. # by the following property on the Java command line:
  17. #
  18. # -Dcom.sun.management.config.file=<this-file>
  19. #
  20. # If -Dcom.sun.management.config.file=<this-file> is set, the port
  21. # number for the management agent can be specified in the config file
  22. # using the following lines:
  23. #
  24. # ################ Management Agent Port #########################
  25. #
  26. # For setting the JMX RMI agent port use the following line
  27. # com.sun.management.jmxremote.port=<port-number>
  28. #
  29. # For setting the SNMP agent port use the following line
  30. # com.sun.management.snmp.port=<port-number>
  31. #####################################################################
  32. # Optional Instrumentation
  33. #####################################################################
  34. #
  35. # By default only the basic instrumentation with low overhead is on.
  36. # The following properties allow to selectively turn on optional
  37. # instrumentation which are off by default and may have some
  38. # additional overhead.
  39. #
  40. # com.sun.management.enableThreadContentionMonitoring
  41. #
  42. # This option enables thread contention monitoring if the
  43. # Java virtual machine supports such instrumentation.
  44. # Refer to the specification for the java.lang.management.ThreadMBean
  45. # interface - see isThreadContentionMonitoringSupported() method.
  46. #
  47. # To enable thread contention monitoring, uncomment the following line
  48. # com.sun.management.enableThreadContentionMonitoring
  49. #####################################################################
  50. # SNMP Management Properties
  51. #####################################################################
  52. #
  53. # If the system property -Dcom.sun.management.snmp.port=<port-number>
  54. # is set then
  55. # - The SNMP agent (with the Java virtual machine MIB) is started
  56. # that listens on the specified port for incoming SNMP requests.
  57. # - the following properties for read for SNMP management.
  58. #
  59. # The configuration can be specified only at startup time.
  60. # Later changes to the above system property (e.g. via setProperty method), this
  61. # config file, or the ACL file has no effect to the running SNMP agent.
  62. #
  63. #
  64. # ##################### SNMP Trap Port #########################
  65. #
  66. # com.sun.management.snmp.trap=<trap-destination-port-number>
  67. # Specifies the remote port number at which managers are expected
  68. # to listen for trap. For each host defined in the ACL file,
  69. # the SNMP agent will send traps at <host>:<trap-destination-port-number>
  70. # Default for this property is 162.
  71. #
  72. # To set port for sending traps to a different port use the following line
  73. # com.sun.management.snmp.trap=<trap-destination-port-number>
  74. #
  75. # ################ SNMP listen interface #########################
  76. #
  77. # com.sun.management.snmp.interface=<InetAddress>
  78. # Specifies the local interface on which the SNMP agent will bind.
  79. # This is useful when running on machines which have several
  80. # interfaces defined. It makes it possible to listen to a specific
  81. # subnet accessible through that interface.
  82. # Default for this property is "localhost".
  83. #
  84. # The format of the value for that property is any string accepted
  85. # by java.net.InetAddress.getByName(String).
  86. #
  87. # For restricting the port on which SNMP agent listens use the following line
  88. # com.sun.management.snmp.interface=<InetAddress>
  89. #
  90. # #################### SNMP ACL file #########################
  91. #
  92. # com.sun.management.snmp.acl=true|false
  93. # Default for this property is true. (Case for true/false ignored)
  94. # If this property is specified as false then the ACL file
  95. # is not checked: all manager hosts are allowed all access.
  96. #
  97. # For SNMP without checking ACL file uncomment the following line
  98. # com.sun.management.snmp.acl=false
  99. #
  100. # com.sun.management.snmp.acl.file=filepath
  101. # Specifies location for ACL file
  102. # This is optional - default location is
  103. # $JRE/lib/management/snmp.acl
  104. #
  105. # If the property "com.sun.management.snmp.acl" is set to false,
  106. # then this property and the ACL file are ignored.
  107. # Otherwise the ACL file must exist and be in the valid format.
  108. # If the ACL file is empty or non existent then no access is allowed.
  109. #
  110. # The SNMP agent will read the ACL file at startup time.
  111. # Modification to the ACL file has no effect to any running SNMP
  112. # agents which read that ACL file at startup.
  113. #
  114. # For a non-default acl file location use the following line
  115. # com.sun.management.snmp.acl.file=filepath
  116. #####################################################################
  117. # RMI Management Properties
  118. #####################################################################
  119. #
  120. # If system property -Dcom.sun.management.jmxremote.port=<port-number>
  121. # is set then
  122. # - A MBean server is started
  123. # - JRE Platform MBeans are registered in the MBean server
  124. # - RMI connector is published in a private readonly registry at
  125. # specified port using a well known name, "jmxrmi"
  126. # - the following properties are read for JMX remote management.
  127. #
  128. # The configuration can be specified only at startup time.
  129. # Later changes to above system property (e.g. via setProperty method),
  130. # this config file, the password file, or the access file have no effect to the
  131. # running MBean server, the connector, or the registry.
  132. #
  133. #
  134. # ########## RMI connector settings for local management ##########
  135. #
  136. # com.sun.management.jmxremote.local.only=true|false
  137. # Default for this property is true. (Case for true/false ignored)
  138. # If this property is specified as true then the local JMX RMI connector
  139. # server will only accept connection requests from clients running on
  140. # the host where the out-of-the-box JMX management agent is running.
  141. # In order to ensure backwards compatibility this property could be
  142. # set to false. However, deploying the local management agent in this
  143. # way is discouraged because the local JMX RMI connector server will
  144. # accept connection requests from any client either local or remote.
  145. # For remote management the remote JMX RMI connector server should
  146. # be used instead with authentication and SSL/TLS encryption enabled.
  147. #
  148. # For allowing the local management agent accept local
  149. # and remote connection requests use the following line
  150. # com.sun.management.jmxremote.local.only=false
  151. #
  152. # ###################### RMI SSL #############################
  153. #
  154. # com.sun.management.jmxremote.ssl=true|false
  155. # Default for this property is true. (Case for true/false ignored)
  156. # If this property is specified as false then SSL is not used.
  157. #
  158. # For RMI monitoring without SSL use the following line
  159. # com.sun.management.jmxremote.ssl=false
  160. # com.sun.management.jmxremote.ssl.config.file=filepath
  161. # Specifies the location of the SSL configuration file. A properties
  162. # file can be used to supply the keystore and truststore location and
  163. # password settings thus avoiding to pass them as cleartext in the
  164. # command-line.
  165. #
  166. # The current implementation of the out-of-the-box management agent will
  167. # look up and use the properties specified below to configure the SSL
  168. # keystore and truststore, if present:
  169. # javax.net.ssl.keyStore=<keystore-location>
  170. # javax.net.ssl.keyStorePassword=<keystore-password>
  171. # javax.net.ssl.trustStore=<truststore-location>
  172. # javax.net.ssl.trustStorePassword=<truststore-password>
  173. # Any other properties in the file will be ignored. This will allow us
  174. # to extend the property set in the future if required by the default
  175. # SSL implementation.
  176. #
  177. # If the property "com.sun.management.jmxremote.ssl" is set to false,
  178. # then this property is ignored.
  179. #
  180. # For supplying the keystore settings in a file use the following line
  181. # com.sun.management.jmxremote.ssl.config.file=filepath
  182. # com.sun.management.jmxremote.ssl.enabled.cipher.suites=<cipher-suites>
  183. # The value of this property is a string that is a comma-separated list
  184. # of SSL/TLS cipher suites to enable. This property can be specified in
  185. # conjunction with the previous property "com.sun.management.jmxremote.ssl"
  186. # in order to control which particular SSL/TLS cipher suites are enabled
  187. # for use by accepted connections. If this property is not specified then
  188. # the SSL/TLS RMI Server Socket Factory uses the SSL/TLS cipher suites that
  189. # are enabled by default.
  190. #
  191. # com.sun.management.jmxremote.ssl.enabled.protocols=<protocol-versions>
  192. # The value of this property is a string that is a comma-separated list
  193. # of SSL/TLS protocol versions to enable. This property can be specified in
  194. # conjunction with the previous property "com.sun.management.jmxremote.ssl"
  195. # in order to control which particular SSL/TLS protocol versions are
  196. # enabled for use by accepted connections. If this property is not
  197. # specified then the SSL/TLS RMI Server Socket Factory uses the SSL/TLS
  198. # protocol versions that are enabled by default.
  199. #
  200. # com.sun.management.jmxremote.ssl.need.client.auth=true|false
  201. # Default for this property is false. (Case for true/false ignored)
  202. # If this property is specified as true in conjunction with the previous
  203. # property "com.sun.management.jmxremote.ssl" then the SSL/TLS RMI Server
  204. # Socket Factory will require client authentication.
  205. #
  206. # For RMI monitoring with SSL client authentication use the following line
  207. # com.sun.management.jmxremote.ssl.need.client.auth=true
  208. # com.sun.management.jmxremote.registry.ssl=true|false
  209. # Default for this property is false. (Case for true/false ignored)
  210. # If this property is specified as true then the RMI registry used
  211. # to bind the RMIServer remote object is protected with SSL/TLS
  212. # RMI Socket Factories that can be configured with the properties:
  213. # com.sun.management.jmxremote.ssl.config.file
  214. # com.sun.management.jmxremote.ssl.enabled.cipher.suites
  215. # com.sun.management.jmxremote.ssl.enabled.protocols
  216. # com.sun.management.jmxremote.ssl.need.client.auth
  217. # If the two properties below are true at the same time, i.e.
  218. # com.sun.management.jmxremote.ssl=true
  219. # com.sun.management.jmxremote.registry.ssl=true
  220. # then the RMIServer remote object and the RMI registry are
  221. # both exported with the same SSL/TLS RMI Socket Factories.
  222. #
  223. # For using an SSL/TLS protected RMI registry use the following line
  224. # com.sun.management.jmxremote.registry.ssl=true
  225. #
  226. # ################ RMI User authentication ################
  227. #
  228. # com.sun.management.jmxremote.authenticate=true|false
  229. # Default for this property is true. (Case for true/false ignored)
  230. # If this property is specified as false then no authentication is
  231. # performed and all users are allowed all access.
  232. #
  233. # For RMI monitoring without any checking use the following line
  234. # com.sun.management.jmxremote.authenticate=false
  235. #
  236. # ################ RMI Login configuration ###################
  237. #
  238. # com.sun.management.jmxremote.login.config=<config-name>
  239. # Specifies the name of a JAAS login configuration entry to use when
  240. # authenticating users of RMI monitoring.
  241. #
  242. # Setting this property is optional - the default login configuration
  243. # specifies a file-based authentication that uses the password file.
  244. #
  245. # When using this property to override the default login configuration
  246. # then the named configuration entry must be in a file that gets loaded
  247. # by JAAS. In addition, the login module(s) specified in the configuration
  248. # should use the name and/or password callbacks to acquire the user's
  249. # credentials. See the NameCallback and PasswordCallback classes in the
  250. # javax.security.auth.callback package for more details.
  251. #
  252. # If the property "com.sun.management.jmxremote.authenticate" is set to
  253. # false, then this property and the password & access files are ignored.
  254. #
  255. # For a non-default login configuration use the following line
  256. # com.sun.management.jmxremote.login.config=<config-name>
  257. #
  258. # ################ RMI Password file location ##################
  259. #
  260. # com.sun.management.jmxremote.password.file=filepath
  261. # Specifies location for password file
  262. # This is optional - default location is
  263. # $JRE/lib/management/jmxremote.password
  264. #
  265. # If the property "com.sun.management.jmxremote.authenticate" is set to
  266. # false, then this property and the password & access files are ignored.
  267. # Otherwise the password file must exist and be in the valid format.
  268. # If the password file is empty or non-existent then no access is allowed.
  269. #
  270. # For a non-default password file location use the following line
  271. # com.sun.management.jmxremote.password.file=filepath
  272. #
  273. # ################ RMI Access file location #####################
  274. #
  275. # com.sun.management.jmxremote.access.file=filepath
  276. # Specifies location for access file
  277. # This is optional - default location is
  278. # $JRE/lib/management/jmxremote.access
  279. #
  280. # If the property "com.sun.management.jmxremote.authenticate" is set to
  281. # false, then this property and the password & access files are ignored.
  282. # Otherwise, the access file must exist and be in the valid format.
  283. # If the access file is empty or non-existent then no access is allowed.
  284. #
  285. # For a non-default password file location use the following line
  286. # com.sun.management.jmxremote.access.file=filepath
  287. #
  288. # ################ Management agent listen interface #########################
  289. #
  290. # com.sun.management.jmxremote.host=<host-or-interface-name>
  291. # Specifies the local interface on which the JMX RMI agent will bind.
  292. # This is useful when running on machines which have several
  293. # interfaces defined. It makes it possible to listen to a specific
  294. # subnet accessible through that interface.
  295. #
  296. # The format of the value for that property is any string accepted
  297. # by java.net.InetAddress.getByName(String).
  298. #