management.properties 14 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328
  1. # ===========================================================================
  2. # Licensed Materials - Property of IBM
  3. # "Restricted Materials of IBM"
  4. #
  5. # IBM SDK, Java(tm) Technology Edition, v7
  6. # (C) Copyright IBM Corp. 2014, 2014. All Rights Reserved
  7. #
  8. # US Government Users Restricted Rights - Use, duplication or disclosure
  9. # restricted by GSA ADP Schedule Contract with IBM Corp.
  10. # ===========================================================================
  11. #####################################################################
  12. # Default Configuration File for Java Platform Management
  13. #####################################################################
  14. #
  15. # The Management Configuration file (in java.util.Properties format)
  16. # will be read if one of the following system properties is set:
  17. # -Dcom.sun.management.jmxremote.port=<port-number>
  18. # or -Dcom.sun.management.snmp.port=<port-number>
  19. # or -Dcom.sun.management.config.file=<this-file>
  20. #
  21. # The default Management Configuration file is:
  22. #
  23. # $JRE/lib/management/management.properties
  24. #
  25. # Another location for the Management Configuration File can be specified
  26. # by the following property on the Java command line:
  27. #
  28. # -Dcom.sun.management.config.file=<this-file>
  29. #
  30. # If -Dcom.sun.management.config.file=<this-file> is set, the port
  31. # number for the management agent can be specified in the config file
  32. # using the following lines:
  33. #
  34. # ################ Management Agent Port #########################
  35. #
  36. # For setting the JMX RMI agent port use the following line
  37. # com.sun.management.jmxremote.port=<port-number>
  38. #
  39. # For setting the SNMP agent port use the following line
  40. # com.sun.management.snmp.port=<port-number>
  41. #####################################################################
  42. # Optional Instrumentation
  43. #####################################################################
  44. #
  45. # By default only the basic instrumentation with low overhead is on.
  46. # The following properties allow to selectively turn on optional
  47. # instrumentation which are off by default and may have some
  48. # additional overhead.
  49. #
  50. # com.sun.management.enableThreadContentionMonitoring
  51. #
  52. # This option enables thread contention monitoring if the
  53. # Java virtual machine supports such instrumentation.
  54. # Refer to the specification for the java.lang.management.ThreadMBean
  55. # interface - see isThreadContentionMonitoringSupported() method.
  56. #
  57. # To enable thread contention monitoring, uncomment the following line
  58. # com.sun.management.enableThreadContentionMonitoring
  59. #####################################################################
  60. # SNMP Management Properties
  61. #####################################################################
  62. #
  63. # If the system property -Dcom.sun.management.snmp.port=<port-number>
  64. # is set then
  65. # - The SNMP agent (with the Java virtual machine MIB) is started
  66. # that listens on the specified port for incoming SNMP requests.
  67. # - the following properties for read for SNMP management.
  68. #
  69. # The configuration can be specified only at startup time.
  70. # Later changes to the above system property (e.g. via setProperty method), this
  71. # config file, or the ACL file has no effect to the running SNMP agent.
  72. #
  73. #
  74. # ##################### SNMP Trap Port #########################
  75. #
  76. # com.sun.management.snmp.trap=<trap-destination-port-number>
  77. # Specifies the remote port number at which managers are expected
  78. # to listen for trap. For each host defined in the ACL file,
  79. # the SNMP agent will send traps at <host>:<trap-destination-port-number>
  80. # Default for this property is 162.
  81. #
  82. # To set port for sending traps to a different port use the following line
  83. # com.sun.management.snmp.trap=<trap-destination-port-number>
  84. #
  85. # ################ SNMP listen interface #########################
  86. #
  87. # com.sun.management.snmp.interface=<InetAddress>
  88. # Specifies the local interface on which the SNMP agent will bind.
  89. # This is useful when running on machines which have several
  90. # interfaces defined. It makes it possible to listen to a specific
  91. # subnet accessible through that interface.
  92. # Default for this property is "localhost".
  93. #
  94. # The format of the value for that property is any string accepted
  95. # by java.net.InetAddress.getByName(String).
  96. #
  97. # For restricting the port on which SNMP agent listens use the following line
  98. # com.sun.management.snmp.interface=<InetAddress>
  99. #
  100. # #################### SNMP ACL file #########################
  101. #
  102. # com.sun.management.snmp.acl=true|false
  103. # Default for this property is true. (Case for true/false ignored)
  104. # If this property is specified as false then the ACL file
  105. # is not checked: all manager hosts are allowed all access.
  106. #
  107. # For SNMP without checking ACL file uncomment the following line
  108. # com.sun.management.snmp.acl=false
  109. #
  110. # com.sun.management.snmp.acl.file=filepath
  111. # Specifies location for ACL file
  112. # This is optional - default location is
  113. # $JRE/lib/management/snmp.acl
  114. #
  115. # If the property "com.sun.management.snmp.acl" is set to false,
  116. # then this property and the ACL file are ignored.
  117. # Otherwise the ACL file must exist and be in the valid format.
  118. # If the ACL file is empty or non existent then no access is allowed.
  119. #
  120. # The SNMP agent will read the ACL file at startup time.
  121. # Modification to the ACL file has no effect to any running SNMP
  122. # agents which read that ACL file at startup.
  123. #
  124. # For a non-default acl file location use the following line
  125. # com.sun.management.snmp.acl.file=filepath
  126. #####################################################################
  127. # RMI Management Properties
  128. #####################################################################
  129. #
  130. # If system property -Dcom.sun.management.jmxremote.port=<port-number>
  131. # is set then
  132. # - A MBean server is started
  133. # - JRE Platform MBeans are registered in the MBean server
  134. # - RMI connector is published in a private readonly registry at
  135. # specified port using a well known name, "jmxrmi"
  136. # - the following properties are read for JMX remote management.
  137. #
  138. # The configuration can be specified only at startup time.
  139. # Later changes to above system property (e.g. via setProperty method),
  140. # this config file, the password file, or the access file have no effect to the
  141. # running MBean server, the connector, or the registry.
  142. #
  143. #
  144. # ########## RMI connector settings for local management ##########
  145. #
  146. # com.sun.management.jmxremote.local.only=true|false
  147. # Default for this property is true. (Case for true/false ignored)
  148. # If this property is specified as true then the local JMX RMI connector
  149. # server will only accept connection requests from clients running on
  150. # the host where the out-of-the-box JMX management agent is running.
  151. # In order to ensure backwards compatibility this property could be
  152. # set to false. However, deploying the local management agent in this
  153. # way is discouraged because the local JMX RMI connector server will
  154. # accept connection requests from any client either local or remote.
  155. # For remote management the remote JMX RMI connector server should
  156. # be used instead with authentication and SSL/TLS encryption enabled.
  157. #
  158. # For allowing the local management agent accept local
  159. # and remote connection requests use the following line
  160. # com.sun.management.jmxremote.local.only=false
  161. #
  162. # ###################### RMI SSL #############################
  163. #
  164. # com.sun.management.jmxremote.ssl=true|false
  165. # Default for this property is true. (Case for true/false ignored)
  166. # If this property is specified as false then SSL is not used.
  167. #
  168. # For RMI monitoring without SSL use the following line
  169. # com.sun.management.jmxremote.ssl=false
  170. # com.sun.management.jmxremote.ssl.config.file=filepath
  171. # Specifies the location of the SSL configuration file. A properties
  172. # file can be used to supply the keystore and truststore location and
  173. # password settings thus avoiding to pass them as cleartext in the
  174. # command-line.
  175. #
  176. # The current implementation of the out-of-the-box management agent will
  177. # look up and use the properties specified below to configure the SSL
  178. # keystore and truststore, if present:
  179. # javax.net.ssl.keyStore=<keystore-location>
  180. # javax.net.ssl.keyStorePassword=<keystore-password>
  181. # javax.net.ssl.trustStore=<truststore-location>
  182. # javax.net.ssl.trustStorePassword=<truststore-password>
  183. # Any other properties in the file will be ignored. This will allow us
  184. # to extend the property set in the future if required by the default
  185. # SSL implementation.
  186. #
  187. # If the property "com.sun.management.jmxremote.ssl" is set to false,
  188. # then this property is ignored.
  189. #
  190. # For supplying the keystore settings in a file use the following line
  191. # com.sun.management.jmxremote.ssl.config.file=filepath
  192. # com.sun.management.jmxremote.ssl.enabled.cipher.suites=<cipher-suites>
  193. # The value of this property is a string that is a comma-separated list
  194. # of SSL/TLS cipher suites to enable. This property can be specified in
  195. # conjunction with the previous property "com.sun.management.jmxremote.ssl"
  196. # in order to control which particular SSL/TLS cipher suites are enabled
  197. # for use by accepted connections. If this property is not specified then
  198. # the SSL/TLS RMI Server Socket Factory uses the SSL/TLS cipher suites that
  199. # are enabled by default.
  200. #
  201. # com.sun.management.jmxremote.ssl.enabled.protocols=<protocol-versions>
  202. # The value of this property is a string that is a comma-separated list
  203. # of SSL/TLS protocol versions to enable. This property can be specified in
  204. # conjunction with the previous property "com.sun.management.jmxremote.ssl"
  205. # in order to control which particular SSL/TLS protocol versions are
  206. # enabled for use by accepted connections. If this property is not
  207. # specified then the SSL/TLS RMI Server Socket Factory uses the SSL/TLS
  208. # protocol versions that are enabled by default.
  209. #
  210. # com.sun.management.jmxremote.ssl.need.client.auth=true|false
  211. # Default for this property is false. (Case for true/false ignored)
  212. # If this property is specified as true in conjunction with the previous
  213. # property "com.sun.management.jmxremote.ssl" then the SSL/TLS RMI Server
  214. # Socket Factory will require client authentication.
  215. #
  216. # For RMI monitoring with SSL client authentication use the following line
  217. # com.sun.management.jmxremote.ssl.need.client.auth=true
  218. # com.sun.management.jmxremote.registry.ssl=true|false
  219. # Default for this property is false. (Case for true/false ignored)
  220. # If this property is specified as true then the RMI registry used
  221. # to bind the RMIServer remote object is protected with SSL/TLS
  222. # RMI Socket Factories that can be configured with the properties:
  223. # com.sun.management.jmxremote.ssl.config.file
  224. # com.sun.management.jmxremote.ssl.enabled.cipher.suites
  225. # com.sun.management.jmxremote.ssl.enabled.protocols
  226. # com.sun.management.jmxremote.ssl.need.client.auth
  227. # If the two properties below are true at the same time, i.e.
  228. # com.sun.management.jmxremote.ssl=true
  229. # com.sun.management.jmxremote.registry.ssl=true
  230. # then the RMIServer remote object and the RMI registry are
  231. # both exported with the same SSL/TLS RMI Socket Factories.
  232. #
  233. # For using an SSL/TLS protected RMI registry use the following line
  234. # com.sun.management.jmxremote.registry.ssl=true
  235. #
  236. # ################ RMI User authentication ################
  237. #
  238. # com.sun.management.jmxremote.authenticate=true|false
  239. # Default for this property is true. (Case for true/false ignored)
  240. # If this property is specified as false then no authentication is
  241. # performed and all users are allowed all access.
  242. #
  243. # For RMI monitoring without any checking use the following line
  244. # com.sun.management.jmxremote.authenticate=false
  245. #
  246. # ################ RMI Login configuration ###################
  247. #
  248. # com.sun.management.jmxremote.login.config=<config-name>
  249. # Specifies the name of a JAAS login configuration entry to use when
  250. # authenticating users of RMI monitoring.
  251. #
  252. # Setting this property is optional - the default login configuration
  253. # specifies a file-based authentication that uses the password file.
  254. #
  255. # When using this property to override the default login configuration
  256. # then the named configuration entry must be in a file that gets loaded
  257. # by JAAS. In addition, the login module(s) specified in the configuration
  258. # should use the name and/or password callbacks to acquire the user's
  259. # credentials. See the NameCallback and PasswordCallback classes in the
  260. # javax.security.auth.callback package for more details.
  261. #
  262. # If the property "com.sun.management.jmxremote.authenticate" is set to
  263. # false, then this property and the password & access files are ignored.
  264. #
  265. # For a non-default login configuration use the following line
  266. # com.sun.management.jmxremote.login.config=<config-name>
  267. #
  268. # ################ RMI Password file location ##################
  269. #
  270. # com.sun.management.jmxremote.password.file=filepath
  271. # Specifies location for password file
  272. # This is optional - default location is
  273. # $JRE/lib/management/jmxremote.password
  274. #
  275. # If the property "com.sun.management.jmxremote.authenticate" is set to
  276. # false, then this property and the password & access files are ignored.
  277. # Otherwise the password file must exist and be in the valid format.
  278. # If the password file is empty or non-existent then no access is allowed.
  279. #
  280. # For a non-default password file location use the following line
  281. # com.sun.management.jmxremote.password.file=filepath
  282. #
  283. # ################ RMI Access file location #####################
  284. #
  285. # com.sun.management.jmxremote.access.file=filepath
  286. # Specifies location for access file
  287. # This is optional - default location is
  288. # $JRE/lib/management/jmxremote.access
  289. #
  290. # If the property "com.sun.management.jmxremote.authenticate" is set to
  291. # false, then this property and the password & access files are ignored.
  292. # Otherwise, the access file must exist and be in the valid format.
  293. # If the access file is empty or non-existent then no access is allowed.
  294. #
  295. # For a non-default password file location use the following line
  296. # com.sun.management.jmxremote.access.file=filepath