Notice: This Wiki is now read only and edits are no longer possible. Please see: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/wikis/Wiki-shutdown-plan for the plan.
Difference between revisions of "SMILA/Documentation/Enable Remote Access"
< SMILA | Documentation
(New page: For security reasons, SMILA is configured by default to allow access to the HTTP and JMX servers only from the host SMILA is running on. {{Note|Making HTTP and JMX accessible to other ho...) |
|||
Line 1: | Line 1: | ||
For security reasons, SMILA is configured by default to allow access to the HTTP and JMX servers only from the host SMILA is running on. | For security reasons, SMILA is configured by default to allow access to the HTTP and JMX servers only from the host SMILA is running on. | ||
− | {{Note|Making HTTP and JMX accessible to other hosts may cause security problems because then everyone with access to the SMILA host can add, change, invoke pipelines, run jobs, clear stores and indexes, etc. Ideally, SMILA is not accessible to everyone | + | {{Note|Warning |
+ | Making the HTTP and JMX interfaces accessible to other hosts may cause security problems because then everyone with access to the SMILA host can add, change, invoke pipelines, run jobs, clear stores and indexes, etc. Ideally, SMILA itself is not accessible to everyone, but there should be a web application for everyone to use so that the SMILA hosts and ports can be secured using firewalls or similar means. If you really need to expose the SMILA HTTP server to the world, you should check the [[Jetty|Jetty Manual]] for ways to make it secure.}} | ||
=== Enable HTTP remote access to SMILA by HTTP === | === Enable HTTP remote access to SMILA by HTTP === |
Revision as of 06:23, 25 January 2012
For security reasons, SMILA is configured by default to allow access to the HTTP and JMX servers only from the host SMILA is running on.
Enable HTTP remote access to SMILA by HTTP
There are two ways to change this:
- Edit SMILA.ini and add this line to make the SMILA HTTP server listen on all network interfaces of the host:
... -Djetty.host=0.0.0.0 ...
- Edit configuration/org.eclipse.smila.http.server/jetty.xml and edit the connector definition. E.g. remove the attribute default="localhost" for setting the "host" property to let it listen on all network interfaces:
... <Call name="addConnector"> <Arg> <New class="org.eclipse.jetty.server.nio.SelectChannelConnector"> <Set name="host"><SystemProperty name="jetty.host"/></Set> <Set name="port"><Property name="jetty.port" default="8080"/></Set> ...
More fine-grained control is possible using the jetty.xml configuration, of course. Consult the Jetty Manual for details.
Enable JMX remote access to SMILA
Edit SMILA.ini and remove this line to make the SMILA JMX server listen on all network interfaces of the host:
... -Djava.rmi.server.hostname=localhost ...