的Java JConsole的JMX連接失敗

Question

我試圖JConsole中連接到由調用的JVM：

java \ 
-Djava.util.logging.config.file=./logging.properties \ 
-Dcom.sun.management.jmxremote.ssl=false \ 
-Dcom.sun.management.jmxremote.authenticate=false \ 
-Dcom.sun.management.jmxremote.port=12700 \ 
-cp . Sleep 

我再嘗試啓動JConsole的有：

jconsole -J-Djava.util.logging.config.file=./logging.properties 

的loggin.properties文件包括：

sun.rmi.level=FINEST 

打開插座端口12700後，RMI然後出現嘗試另一個端口上的連接：

FINER: [javax.management.remote.rmi.RMIConnector: jmxServiceURL=service:jmx:rmi:///jndi/rmi://10.40.243.12:12700/jmxrmi] connecting... 
Jan 5, 2012 2:30:42 PM RMIConnector connect 
FINER: [javax.management.remote.rmi.RMIConnector: jmxServiceURL=service:jmx:rmi:///jndi/rmi://10.40.243.12:12700/jmxrmi] finding stub... 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPEndpoint <clinit> 
FINE: JConsole.addHost: localHostKnown = true, localHost = 10.206.6.59 
Jan 5, 2012 2:30:43 PM sun.rmi.server.UnicastRef newCall 
FINE: JConsole.addHost: get connection 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPTransport <init> 
FINE: JConsole.addHost: Version = 2, ep = [10.206.6.59:0] 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPEndpoint getLocalEndpoint 
FINE: JConsole.addHost: created local endpoint for socket factory null on port 0 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPChannel createConnection 
FINE: JConsole.addHost: create connection 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPEndpoint newSocket 
FINER: JConsole.addHost: opening socket to [10.40.243.12:12700] 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.proxy.RMIMasterSocketFactory createSocket 
FINE: JConsole.addHost: host: 10.40.243.12, port: 12700 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPChannel createConnection 
FINER: JConsole.addHost: server suggested 10.206.6.59:12306 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPChannel createConnection 
FINER: JConsole.addHost: using 10.206.6.59:0 
Jan 5, 2012 2:30:43 PM sun.rmi.server.UnicastRef newCall 
FINER: JConsole.addHost: create call context 
Jan 5, 2012 2:30:43 PM sun.rmi.server.UnicastRef logClientCall 
FINER: JConsole.addHost: outbound call: [endpoint:[10.40.243.12:12700](remote),objID:[0:0:0, 0]] : sun.rmi.registry.RegistryImpl_Stub[0:0:0, 0]: java.rmi.Remote lookup(java.lang.String) 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.StreamRemoteCall <init> 
FINER: JConsole.addHost: write remote call header... 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.StreamRemoteCall getOutputStream 
FINER: JConsole.addHost: getting output stream 
Jan 5, 2012 2:30:43 PM sun.rmi.server.UnicastRef invoke 
FINER: JConsole.addHost: execute call 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.StreamRemoteCall getInputStream 
FINER: JConsole.addHost: getting input stream 
Jan 5, 2012 2:30:43 PM sun.rmi.server.LoaderHandler loadClass 
FINE: JConsole.addHost: name = "javax.management.remote.rmi.RMIServerImpl_Stub", codebase = "", defaultLoader = sun.misc.Launcher$AppClassLoader@a39137 
Jan 5, 2012 2:30:43 PM sun.rmi.server.LoaderHandler loadClass 
FINER: JConsole.addHost: class "javax.management.remote.rmi.RMIServerImpl_Stub" found via defaultLoader, defined by null 
Jan 5, 2012 2:30:43 PM sun.rmi.server.LoaderHandler loadClass 
FINE: JConsole.addHost: name = "java.rmi.server.RemoteStub", codebase = "", defaultLoader = sun.misc.Launcher$AppClassLoader@a39137 
Jan 5, 2012 2:30:43 PM sun.rmi.server.LoaderHandler loadClass 
FINER: JConsole.addHost: class "java.rmi.server.RemoteStub" found via defaultLoader, defined by null 
Jan 5, 2012 2:30:43 PM sun.rmi.server.LoaderHandler loadClass 
FINE: JConsole.addHost: name = "java.rmi.server.RemoteObject", codebase = "", defaultLoader = sun.misc.Launcher$AppClassLoader@a39137 
Jan 5, 2012 2:30:43 PM sun.rmi.server.LoaderHandler loadClass 
FINER: JConsole.addHost: class "java.rmi.server.RemoteObject" found via defaultLoader, defined by null 
Jan 5, 2012 2:30:43 PM sun.rmi.server.UnicastRef done 
FINE: JConsole.addHost: free connection (reuse = true) 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPChannel free 
FINE: JConsole.addHost: reuse connection 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPChannel free 
FINE: JConsole.addHost: create reaper 
Jan 5, 2012 2:30:43 PM sun.rmi.server.UnicastRef newCall 
FINE: JConsole.addHost: get connection 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPChannel createConnection 
FINE: JConsole.addHost: create connection 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.tcp.TCPEndpoint newSocket 
FINER: JConsole.addHost: opening socket to [tdiap12:41096] 
Jan 5, 2012 2:30:43 PM sun.rmi.transport.proxy.RMIMasterSocketFactory createSocket 
FINE: JConsole.addHost: host: tdiap12, port: 41096 

第一次連接嘗試成功，因爲在遠程服務器上，我可以看到ESTABLISHED連接。

wse2tst@tdiap12:~> netstat -a | grep 12700 
tcp  0  0 *:12700      *:*       LISTEN  
tcp  0  0 tdiap12.vgcar.net:12700  per-00c0016253a2.vgca:12252 ESTABLISHED 

數據包跟蹤也表示連接成功。

到端口41096的第二個連接超時，並且jconsole應用程序報告「連接失敗」並終止第一個連接。爲什麼要嘗試第二次連接？有沒有辦法指定第二個連接的端口？目標服務器受到嚴格控制，其他端口被防火牆規則阻止。在多次連接嘗試中，第二個端口將更改爲不同的隨機值。

感謝您的幫助， 史蒂夫

Answer 1

的外的開箱JMX實現使用兩個端口 - 一個用於這是隨機選擇的註冊表（您指定的一個），一個用於實際的連接（！）。這是一個設計上的缺陷，因爲隨機選擇第二個端口使得配置防火牆非常困難。

然而，有一些方法可以 - 或者你可以自己做manually，或者如果你使用的是Tomcat，你可以讓它handle it for you。比使用手動編碼劑

Answer 2

新的和更好的解決方案，是使用這似乎在Java 7中要引入的新的參數：

-Dcom.sun.management.jmxremote.rmi.port=7091

所以在組合 - 相同的端口可用於：

-Dcom.sun.management.jmxremote.port=7091 -Dcom.sun.management.jmxremote.rmi.port=7091

發現的解決方案在這裏： http://hirt.se/blog/?p=289

Answer 3

您可以使用參數 - 「Dcom.sun.management.jmxremote.rmi.port」設置第二個端口，其中端口號可以與第一個端口號相同。即使在設置它之後，它將促使不安全的連接...請允許不安全的連接，然後只有它會允許您進一步進行，否則在日誌中您將發現錯誤無法連接：java.lang.SecurityException：期待sun.rmi .server.UnicastRef2在存根中的遠程引用！

謝謝