management.properties 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304
  1. #####################################################################
  2. # Default Configuration File for Java Platform Management
  3. #####################################################################
  4. #
  5. # The Management Configuration file (in java.util.Properties format)
  6. # will be read if one of the following system properties is set:
  7. # -Dcom.sun.management.jmxremote.port=<port-number>
  8. # or -Dcom.sun.management.config.file=<this-file>
  9. #
  10. # The default Management Configuration file is:
  11. #
  12. # $JRE/conf/management/management.properties
  13. #
  14. # Another location for the Management Configuration File can be specified
  15. # by the following property on the Java command line:
  16. #
  17. # -Dcom.sun.management.config.file=<this-file>
  18. #
  19. # If -Dcom.sun.management.config.file=<this-file> is set, the port
  20. # number for the management agent can be specified in the config file
  21. # using the following lines:
  22. #
  23. # ################ Management Agent Port #########################
  24. #
  25. # For setting the JMX RMI agent port use the following line
  26. # com.sun.management.jmxremote.port=<port-number>
  27. #
  28. # For setting the JMX local server port use the following line
  29. # com.sun.management.jmxremote.local.port=<port-number>
  30. #####################################################################
  31. # Optional Instrumentation
  32. #####################################################################
  33. #
  34. # By default only the basic instrumentation with low overhead is on.
  35. # The following properties allow to selectively turn on optional
  36. # instrumentation which are off by default and may have some
  37. # additional overhead.
  38. #
  39. # com.sun.management.enableThreadContentionMonitoring
  40. #
  41. # This option enables thread contention monitoring if the
  42. # Java virtual machine supports such instrumentation.
  43. # Refer to the specification for the java.lang.management.ThreadMXBean
  44. # interface - see isThreadContentionMonitoringSupported() method.
  45. #
  46. # To enable thread contention monitoring, uncomment the following line
  47. # com.sun.management.enableThreadContentionMonitoring
  48. #####################################################################
  49. # RMI Management Properties
  50. #####################################################################
  51. #
  52. # If system property -Dcom.sun.management.jmxremote.port=<port-number>
  53. # is set then
  54. # - A MBean server is started
  55. # - JRE Platform MBeans are registered in the MBean server
  56. # - RMI connector is published in a private readonly registry at
  57. # specified port using a well known name, "jmxrmi"
  58. # - the following properties are read for JMX remote management.
  59. #
  60. # The configuration can be specified only at startup time.
  61. # Later changes to above system property (e.g. via setProperty method),
  62. # this config file, the password file, or the access file have no effect to the
  63. # running MBean server, the connector, or the registry.
  64. #
  65. #
  66. # ########## RMI connector settings for local management ##########
  67. #
  68. # com.sun.management.jmxremote.local.only=true|false
  69. # Default for this property is true. (Case for true/false ignored)
  70. # If this property is specified as true then the local JMX RMI connector
  71. # server will only accept connection requests from clients running on
  72. # the host where the out-of-the-box JMX management agent is running.
  73. # In order to ensure backwards compatibility this property could be
  74. # set to false. However, deploying the local management agent in this
  75. # way is discouraged because the local JMX RMI connector server will
  76. # accept connection requests from any client either local or remote.
  77. # For remote management the remote JMX RMI connector server should
  78. # be used instead with authentication and SSL/TLS encryption enabled.
  79. #
  80. # For allowing the local management agent accept local
  81. # and remote connection requests use the following line
  82. # com.sun.management.jmxremote.local.only=false
  83. #
  84. # ###################### RMI SSL #############################
  85. #
  86. # com.sun.management.jmxremote.ssl=true|false
  87. # Default for this property is true. (Case for true/false ignored)
  88. # If this property is specified as false then SSL is not used.
  89. #
  90. # For RMI monitoring without SSL use the following line
  91. # com.sun.management.jmxremote.ssl=false
  92. # com.sun.management.jmxremote.ssl.config.file=filepath
  93. # Specifies the location of the SSL configuration file. A properties
  94. # file can be used to supply the keystore and truststore location and
  95. # password settings thus avoiding to pass them as cleartext in the
  96. # command-line.
  97. #
  98. # The current implementation of the out-of-the-box management agent will
  99. # look up and use the properties specified below to configure the SSL
  100. # keystore and truststore, if present:
  101. # javax.net.ssl.keyStore=<keystore-location>
  102. # javax.net.ssl.keyStorePassword=<keystore-password>
  103. # javax.net.ssl.trustStore=<truststore-location>
  104. # javax.net.ssl.trustStorePassword=<truststore-password>
  105. # Any other properties in the file will be ignored. This will allow us
  106. # to extend the property set in the future if required by the default
  107. # SSL implementation.
  108. #
  109. # If the property "com.sun.management.jmxremote.ssl" is set to false,
  110. # then this property is ignored.
  111. #
  112. # For supplying the keystore settings in a file use the following line
  113. # com.sun.management.jmxremote.ssl.config.file=filepath
  114. # com.sun.management.jmxremote.ssl.enabled.cipher.suites=<cipher-suites>
  115. # The value of this property is a string that is a comma-separated list
  116. # of SSL/TLS cipher suites to enable. This property can be specified in
  117. # conjunction with the previous property "com.sun.management.jmxremote.ssl"
  118. # in order to control which particular SSL/TLS cipher suites are enabled
  119. # for use by accepted connections. If this property is not specified then
  120. # the SSL/TLS RMI Server Socket Factory uses the SSL/TLS cipher suites that
  121. # are enabled by default.
  122. #
  123. # com.sun.management.jmxremote.ssl.enabled.protocols=<protocol-versions>
  124. # The value of this property is a string that is a comma-separated list
  125. # of SSL/TLS protocol versions to enable. This property can be specified in
  126. # conjunction with the previous property "com.sun.management.jmxremote.ssl"
  127. # in order to control which particular SSL/TLS protocol versions are
  128. # enabled for use by accepted connections. If this property is not
  129. # specified then the SSL/TLS RMI Server Socket Factory uses the SSL/TLS
  130. # protocol versions that are enabled by default.
  131. #
  132. # com.sun.management.jmxremote.ssl.need.client.auth=true|false
  133. # Default for this property is false. (Case for true/false ignored)
  134. # If this property is specified as true in conjunction with the previous
  135. # property "com.sun.management.jmxremote.ssl" then the SSL/TLS RMI Server
  136. # Socket Factory will require client authentication.
  137. #
  138. # For RMI monitoring with SSL client authentication use the following line
  139. # com.sun.management.jmxremote.ssl.need.client.auth=true
  140. # com.sun.management.jmxremote.registry.ssl=true|false
  141. # Default for this property is false. (Case for true/false ignored)
  142. # If this property is specified as true then the RMI registry used
  143. # to bind the RMIServer remote object is protected with SSL/TLS
  144. # RMI Socket Factories that can be configured with the properties:
  145. # com.sun.management.jmxremote.ssl.config.file
  146. # com.sun.management.jmxremote.ssl.enabled.cipher.suites
  147. # com.sun.management.jmxremote.ssl.enabled.protocols
  148. # com.sun.management.jmxremote.ssl.need.client.auth
  149. # If the two properties below are true at the same time, i.e.
  150. # com.sun.management.jmxremote.ssl=true
  151. # com.sun.management.jmxremote.registry.ssl=true
  152. # then the RMIServer remote object and the RMI registry are
  153. # both exported with the same SSL/TLS RMI Socket Factories.
  154. #
  155. # For using an SSL/TLS protected RMI registry use the following line
  156. # com.sun.management.jmxremote.registry.ssl=true
  157. #
  158. # ################ RMI User authentication ################
  159. #
  160. # com.sun.management.jmxremote.authenticate=true|false
  161. # Default for this property is true. (Case for true/false ignored)
  162. # If this property is specified as false then no authentication is
  163. # performed and all users are allowed all access.
  164. #
  165. # For RMI monitoring without any checking use the following line
  166. # com.sun.management.jmxremote.authenticate=false
  167. #
  168. # ################ RMI Login configuration ###################
  169. #
  170. # com.sun.management.jmxremote.login.config=<config-name>
  171. # Specifies the name of a JAAS login configuration entry to use when
  172. # authenticating users of RMI monitoring.
  173. #
  174. # Setting this property is optional - the default login configuration
  175. # specifies a file-based authentication that uses the password file.
  176. #
  177. # When using this property to override the default login configuration
  178. # then the named configuration entry must be in a file that gets loaded
  179. # by JAAS. In addition, the login module(s) specified in the configuration
  180. # should use the name and/or password callbacks to acquire the user's
  181. # credentials. See the NameCallback and PasswordCallback classes in the
  182. # javax.security.auth.callback package for more details.
  183. #
  184. # If the property "com.sun.management.jmxremote.authenticate" is set to
  185. # false, then this property and the password & access files are ignored.
  186. #
  187. # For a non-default login configuration use the following line
  188. # com.sun.management.jmxremote.login.config=<config-name>
  189. #
  190. # ################ RMI Password file location ##################
  191. #
  192. # com.sun.management.jmxremote.password.file=filepath
  193. # Specifies location for password file
  194. # This is optional - default location is
  195. # $JRE/conf/management/jmxremote.password
  196. #
  197. # If the property "com.sun.management.jmxremote.authenticate" is set to
  198. # false, then this property and the password & access files are ignored.
  199. # Otherwise the password file must exist and be in the valid format.
  200. # If the password file is empty or non-existent then no access is allowed.
  201. #
  202. # For a non-default password file location use the following line
  203. # com.sun.management.jmxremote.password.file=filepath
  204. #
  205. # ################# Hash passwords in password file ##############
  206. # com.sun.management.jmxremote.password.toHashes = true|false
  207. # Default for this property is true.
  208. # Specifies if passwords in the password file should be hashed or not.
  209. # If this property is true, and if the password file is writable, and if the
  210. # system security policy allows writing into the password file,
  211. # all the clear passwords in the password file will be replaced by
  212. # their SHA3-512 hash when the file is read by the server
  213. #
  214. #
  215. # ################ RMI Access file location #####################
  216. #
  217. # com.sun.management.jmxremote.access.file=filepath
  218. # Specifies location for access file
  219. # This is optional - default location is
  220. # $JRE/conf/management/jmxremote.access
  221. #
  222. # If the property "com.sun.management.jmxremote.authenticate" is set to
  223. # false, then this property and the password & access files are ignored.
  224. # Otherwise, the access file must exist and be in the valid format.
  225. # If the access file is empty or non-existent then no access is allowed.
  226. #
  227. # For a non-default password file location use the following line
  228. # com.sun.management.jmxremote.access.file=filepath
  229. #
  230. # ################ Management agent listen interface #########################
  231. #
  232. # com.sun.management.jmxremote.host=<host-or-interface-name>
  233. # Specifies the local interface on which the JMX RMI agent will bind.
  234. # This is useful when running on machines which have several
  235. # interfaces defined. It makes it possible to listen to a specific
  236. # subnet accessible through that interface.
  237. #
  238. # The format of the value for that property is any string accepted
  239. # by java.net.InetAddress.getByName(String).
  240. #
  241. # ################ Filter for ObjectInputStream #############################
  242. # com.sun.management.jmxremote.serial.filter.pattern=<filter-string>
  243. # A filter, if configured, is used by java.io.ObjectInputStream during
  244. # deserialization of parameters sent to the JMX default agent to validate the
  245. # contents of the stream.
  246. # A filter is configured as a sequence of patterns, each pattern is either
  247. # matched against the name of a class in the stream or defines a limit.
  248. # Patterns are separated by ";" (semicolon).
  249. # Whitespace is significant and is considered part of the pattern.
  250. #
  251. # If a pattern includes a "=", it sets a limit.
  252. # If a limit appears more than once the last value is used.
  253. # Limits are checked before classes regardless of the order in the sequence of patterns.
  254. # If any of the limits are exceeded, the filter status is REJECTED.
  255. #
  256. # maxdepth=value - the maximum depth of a graph
  257. # maxrefs=value - the maximum number of internal references
  258. # maxbytes=value - the maximum number of bytes in the input stream
  259. # maxarray=value - the maximum array length allowed
  260. #
  261. # Other patterns, from left to right, match the class or package name as
  262. # returned from Class.getName.
  263. # If the class is an array type, the class or package to be matched is the element type.
  264. # Arrays of any number of dimensions are treated the same as the element type.
  265. # For example, a pattern of "!example.Foo", rejects creation of any instance or
  266. # array of example.Foo.
  267. #
  268. # If the pattern starts with "!", the status is REJECTED if the remaining pattern
  269. # is matched; otherwise the status is ALLOWED if the pattern matches.
  270. # If the pattern contains "/", the non-empty prefix up to the "/" is the module name;
  271. # if the module name matches the module name of the class then
  272. # the remaining pattern is matched with the class name.
  273. # If there is no "/", the module name is not compared.
  274. # If the pattern ends with ".**" it matches any class in the package and all subpackages.
  275. # If the pattern ends with ".*" it matches any class in the package.
  276. # If the pattern ends with "*", it matches any class with the pattern as a prefix.
  277. # If the pattern is equal to the class name, it matches.
  278. # Otherwise, the status is UNDECIDED.