SMILA/Documentation/Enable Remote Access

From Eclipsepedia

< SMILA‎ | Documentation
Revision as of 06:22, 25 January 2012 by Juergen.schumacher.attensity.com (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

For security reasons, SMILA is configured by default to allow access to the HTTP and JMX servers only from the host SMILA is running on.

Note.png
Making HTTP and JMX accessible to other hosts may cause security problems because then everyone with access to the SMILA host can add, change, invoke pipelines, run jobs, clear stores and indexes, etc. Ideally, SMILA is not accessible to everyone itself, but only through a web application so that the SMILA hosts and ports can be secured using firewalls. If you really need to expose the SMILA HTTP server to the world, you should check the Jetty Manual for ways to make it secure.


Enable HTTP remote access to SMILA by HTTP

There are two ways to change this:

  1. Edit SMILA.ini and add this line to make the SMILA HTTP server listen on all network interfaces of the host:
...
-Djetty.host=0.0.0.0
...
  1. Edit configuration/org.eclipse.smila.http.server/jetty.xml and edit the connector definition. E.g. remove the attribute default="localhost" for setting the "host" property to let it listen on all network interfaces:
    ...
    <Call name="addConnector">
      <Arg>
          <New class="org.eclipse.jetty.server.nio.SelectChannelConnector">
            <Set name="host"><SystemProperty name="jetty.host"/></Set>
            <Set name="port"><Property name="jetty.port" default="8080"/></Set>
    ...

More fine-grained control is possible using the jetty.xml configuration, of course. Consult the Jetty Manual for details.

Enable JMX remote access to SMILA

Edit SMILA.ini and remove this line to make the SMILA JMX server listen on all network interfaces of the host:

...
-Djava.rmi.server.hostname=localhost
...