远程遥控Resin jconsole 具体配置做法

接下来配置外网访问JMX管理。
由于jdk的jmx管理端口启动时无法绑定指定的ip，默认是绑定到所有ip的，因此在公网上开放jmx端口时，必须设置jmx访问的帐号和密码：
操作步骤如下：
在/usr/local/app/resin/conf建立jmx权限配置文件：
1.复制jdk提供的jmx帐号和密码配置文件模板到resin的conf目录：
[email protected]:/usr/local/app/resin/conf# cp /usr/local/app/jdk1.6.0_21/jre/lib/management/jmxremote.* /usr/local/app/resin/conf
查看文件：
[email protected]:/usr/local/app/resin/conf# ls -alh jmxremote.*
-rw-r–r– 1 root root 4.0K Oct 23 14:49 jmxremote.access
-r–r–r– 1 root root 2.8K Oct 23 14:49 jmxremote.password.template
2.在/usr/local/app/resin/conf下重命名:jmxremote.password.template为jmxremote.password：
[email protected]:/usr/local/app/resin/conf# mv jmxremote.password.template  jmxremote.password
3.给密码文件加上写权限：
[email protected]:/usr/local/app/resin/conf# chmod +w jmxremote.password
查看文件：
[email protected]:/usr/local/app/resin/conf# ls -alh jmxremote.*
-rw-r–r– 1 root root 4.0K Oct 23 14:49 jmxremote.access
-rw-r–r– 1 root root 2.8K Oct 23 14:49 jmxremote.password
4.以追加文件方式往jmx权限控制文件中加入一个有读写权限的帐号，帐号名字是resinjmx
[email protected]:/usr/local/app/resin/conf# echo “resinjmx         readwrite” >> jmxremote.access
查看帐号添加是否ok：
[email protected]:/usr/local/app/resin/conf# tail jmxremote.access
# Default access control entries:
# o The “monitorRole” role has readonly access.
# o The “controlRole” role has readwrite access and can create the standard
#   Timer and Monitor MBeans defined by the JMX API.

monitorRole   readonly
controlRole   readwrite \
create javax.management.monitor.*,javax.management.timer.* \
unregister
resinjmx         readwrite
5.往jmx权限控制的密码文件中加入resinjmx帐号的密码：618119
[email protected]:/usr/local/app/resin/conf# echo “resinjmx 618119″ >> jmxremote.password
查看密码信息是否添加ok：
[email protected]:/usr/local/app/resin/conf# tail jmxremote.password
# or specify another, less accessible file in the management config file
# as described above.
#
# Following are two commented-out entries.  The “measureRole” role has
# password “QED”.  The “controlRole” role has password “R&D”.
#
# monitorRole  QED
# controlRole   R&D

resinjmx 618119

6.修改jmxremote.*的权限，只允许启动resin的用户名对该文件拥有读写权限：
[email protected]:/usr/local/app/resin/conf# chmod 600 jmxremote.access
[email protected]:/usr/local/app/resin/conf# chmod 600 jmxremote.password
[email protected]:/usr/local/app/resin/conf# ls -alh jmxremote.*
-rw——- 1 root root 4.0K Oct 23 14:54 jmxremote.access
-rw——- 1 root root 2.9K Oct 23 14:57 jmxremote.password
(如果文件权限没有正确设置，在启动使用了jmx的resin时，jvm-default.log中的出错信息为：
Error: Password file read access must be restricted: /usr/local/app/resin//conf/jmxremote.password，可以参考：http://www.opennms.org/wiki/Tomcat_6_JMX_How-To
)
7.配置/usr/local/app/resin/conf的resin.xml
在<server-default>节点下加入下列启动参数，并保存resin.xml
<!–
需要在远程服务器上运行hostname -i，如果显示的127.0.0.1，则需要加上下面一行来指定hostname为公网ip
<jvm-arg>-Djava.rmi.server.hostname=75.126.115.214</jvm-arg>
配置该项的时候，java.rmi.server.hostname=127.0.0.1是肯定不行的，我就是这样绕了弯路：
[email protected]:/usr/local/app/resin/log# hostname -i
75.126.115.214
–>
<jvm-arg>-Dcom.sun.management.jmxremote.port=50000</jvm-arg>
<jvm-arg>-Dcom.sun.management.jmxremote.ssl=false</jvm-arg>
<jvm-arg>-Dcom.sun.management.jmxremote.authenticate=true</jvm-arg>
<jvm-arg>-Dcom.sun.management.jmxremote.password.file=${resin.root}/conf/jmxremote.password</jvm-arg>
<jvm-arg>-Dcom.sun.management.jmxremote.access.file=${resin.root}/conf/jmxremote.access</jvm-arg>

8.重启resin:
[email protected]:/usr/local/app/resin/conf# /usr/local/app/resin/bin/resin.sh shutdown
Resin/4.0.12 shutdown watchdog at 127.0.0.1:6600
[email protected]:/usr/local/app/resin/conf# /usr/local/app/resin/bin/resin.sh start
Resin/4.0.12 launching watchdog at 127.0.0.1:6600
Resin/4.0.12 started -server ” for watchdog at 127.0.0.1:6600

9.在本地电脑运行/usr/local/app/jdk1.6.0_21/bin/jconsole，远程进程填上：618119.com:50000，
点“连接”，提示连接失败。
重新在用户名填resinjmx，口令填：618119.com.
连接成功。