JVM Monitor

If you do not use authentication for your Java machine monitors (for example when you can only access them from computers in a local network), you need to expose the port that ReadyAPI will use to connect to the machine. You also need to explicitly disable SSL security and authentication.

You do this by modifying your VM settings. The simplest way is to create a batch file (.bat or .sh) with the following lines:

On Linux, .sh files must be in a single line without caret symbols (^).

You can find detailed instructions on the Oracle website.

Adding authorization is more complex. You need to create files that hold user credentials and permissions, and specify them in your VM settings.

• First, create a file that holds user credentials. It can be a simple text file. For example, create a password.txt file with the following text:

  MyUser MyPassword

• Java requires that the file with user credentials belongs exclusively to the owner of the file. Usually, your operating system provides all users with access to the file. To make sure you have correct permissions, use the following commands:

  • On Windows:

    1. Use icacls password.txt /setowner MyOwner, where MyOwner is the name of a user that launches the application.

    2. Use the cacls password.txt /P MyOwner:R command, where MyOwner is the same user you set as the owner.

  • On Linux and Mac, use the chmod 600 password.txt command.

• Then, create the file that holds user access permissions. It can be a simple text file. Users do not need write permissions to access monitors. Create an access.txt file with the following text:

  MyUser readonly

• Modify your VM settings to allow remote connections. The simplest way to do this is to create a batch file (.bat or .sh) with the following lines:

  java ^
  -Dcom.sun.management.jmxremote ^
  -Dcom.sun.management.jmxremote.port=9999 ^
  -Dcom.sun.management.jmxremote.ssl=false ^
  -Dcom.sun.management.jmxremote.authenticate=true ^
  -Dcom.sun.management.jmxremote.password.file=password.txt ^
  -Dcom.sun.management.jmxremote.access.file=access.txt ^
  -jar MyApp.jar

  On Linux, the above code should be in a single line without caret symbols (^).

You can find detailed instructions on the Oracle website.

If you cannot connect to JVM running on a remote computer, add the following line to your configuration file:

Where <Host_Name_Or_IP> refers to the IP address or host name of the computer running your application.

ReadyAPI cannot connect to a Linux machine if its name is resolved as a local address, or if the Linux computer does not accept requests from the computer running ReadyAPI. If you have connection issues, check the following:

• Run the hostname -i command. If it returns a local IP address (for example, 127.0.0.1), edit /etc/hosts so that the hostname resolves to the host address.

• Execute the following command to add a rule to allow requests from external clients:

  sudo iptables -I INPUT -s <R!_Host_Name_Or_IP> -p tcp --destination-port <JMX_Remote_Port> -j ACCEPT