• Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other Pie Elite all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Tim Cooke
  • Campbell Ritchie
  • Paul Clapham
  • Ron McLeod
  • Liutauras Vilda
Sheriffs:
  • Jeanne Boyarsky
  • Rob Spoor
  • Bear Bibeault
Saloon Keepers:
  • Jesse Silverman
  • Tim Moores
  • Stephan van Hulst
  • Tim Holloway
  • Carey Brown
Bartenders:
  • Piet Souris
  • Al Hobbs
  • salvin francis

JBoss 5 IP Binding Automatic Detection

 
Ranch Hand
Posts: 84
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Greetings!

I am setting up a dedicated machine running JBoss 5 AS, upon accessing it from another computer (over http) it cannot be access. As it is still pointing to a local default IP address. I’ve also tested it in the same machine where it is running using its IP Address and not the typical http://localhost:8080/.

Not like when using Apache Tomcat, it automatically detects the current IP address of the machine where it is running.

By searching the Net, I find that you need to run JBoss with by specifying the IP Address, like below:



The questions now are:

- What if I am using an IDE and JBoss as its server, can I bind the IP from the set-up?
- No kidding, is that really the DEFAULT? Like every developer will just be using it for local environment.
- And WHY IS IT LIKE THAT, for multiple instances of JBoss on one machine?

Thanks in advance, appreciate your response! (^_^)

P.S.
I also did some search text, and the 127.0.0.1 (that serves as our localhost) is hard-coded.
 
Sheriff
Posts: 10445
227
IntelliJ IDE Ubuntu
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

- No kidding, is that really the DEFAULT? Like every developer will just be using it for local environment.
- And WHY IS IT LIKE THAT, for multiple instances of JBoss on one machine?



See this http://www.jboss.org/community/docs/DOC-10179

run –d 192.168.0.1 or run –d 0.0.0.0



I believe that's a typo - you should be using -b

What if I am using an IDE and JBoss as its server, can I bind the IP from the set-up?



I don't use an IDE for launching JBoss, so i won't be able to answer that. But if you mention which specific IDE, then maybe someone else will help you.
 
Daniel Jabonete
Ranch Hand
Posts: 84
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
As I read the given link below:


See this http://www.jboss.org/community/docs/DOC-10179



it seems that the main concern is in the securities of the admin.

If I am a developer running the development in a network environment (lets say internally, w/in organization), would I be concern about the admin tools to be visible?

If I will make my application server public will I be concern with the admin tools to be exposed? ofcoursed!

The significance here is that between development & production environment.

It is just so happen that I am developing in a network setup, that JBoss need to have an extra paramenter to be available in network environment.


run –d 192.168.0.1 or run –d 0.0.0.0

I believe that's a typo - you should be using -b



This is a typo error, it should be -b. I got it from here How to configure JBoss AS - Production Settings and Tuning Tips


What if I am using an IDE and JBoss as its server, can I bind the IP from the set-up?
I don't use an IDE for launching JBoss, so i won't be able to answer that. But if you mention which specific IDE, then maybe someone else will help you.



For being particular with the IDE(s), lets say in Eclipse, or NetBeans (preferred latest version).

Thanks very much!
 
author
Posts: 5856
7
Android Eclipse IDE Ubuntu
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator

If I am a developer running the development in a network environment (lets say internally, w/in organization), would I be concern about the admin tools to be visible?



I will assume that the system in question is behind a secure firewall and thus is accessible only by other people connected to your company's network. Do you have any practical jokes in your office? Anyone out to get you? Any outside customers that connect to your network using wireless access when they come to your building for meetings? If the answers to all of these are no (in which case I would ask how you know there are no practical jokers among your co-workers), then you you don't need to be concerned with this.

However, a simple google search will show you numerous JBoss AS installations on the internet where people have never bothered to lock down the admin tools when deploying earlier versions (pre 4.2.x) of JBoss AS. Hey, for grins you can easily shut down their web sites! By making the default binding be localhost most developers still have easy access because most developers typically have JBoss AS locally. And then when they need to go into production and thus have to research why they need the -b option, they might also think about perhaps, maybe, possibly locking down the admin applications. If you were to use JBoss EAP you would find that not only does it bind to localhost, but the admin apps are already locked down. And they are not just locked down, but by default, there are no accounts that have access to them. Now that's secure!

I don't understand the question about Eclipse and JBoss AS. Eclipse runs on your desktop (or laptop) and JBoss AS is running on a remote server (or at least that is what I understand from your post). Therefore, you would not be starting JBoss AS from Eclipse.
 
Ranch Hand
Posts: 167
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi
How about using the Program Arguments for JBoss in your IDE. you can specify -b 0.0.0.0 there.
Specifically, if your are using eclipse, follow this
Run- Run configurations- select your JBoss server. Then goto the Aruguments tab and you can add -b 0.0.0.0 in Program Arugments text area and Apply and then launch JBoss.
Your Jboss should then be accessible from otehr machines

Jhakda
 
Daniel Jabonete
Ranch Hand
Posts: 84
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
Hi Guys,

My apologies for the late reply.

To Jhakda,

Adding the arguments might do the trick. Thanks!


To Peter,

Is JBoss EAP Free?

I' am not sure still about running JBoss AS w/ the -b options will secure or lock the admin from others...

And in production, you can removed those things that you think are not secure to be exposed outside, right....


Thanks all for your response, I really appreciate it. Keep it coming! ^_^)
 
Peter Johnson
author
Posts: 5856
7
Android Eclipse IDE Ubuntu
  • Mark post as helpful
  • send pies
    Number of slices to send:
    Optional 'thank-you' note:
  • Quote
  • Report post to moderator
JBoss EAP is the for-subscription variation of JBoss AS, so it is not free (though still open source).

Just using, or not using, the '-b' option does not prevent non-admin access. To do that you must follow the security recommendations. All that not entering '-b' does is requires someone to use your same system to access administrative functionality, because only localhost has access.
 
You showed up just in time for the waffles! And this tiny ad:
Building a Better World in your Backyard by Paul Wheaton and Shawn Klassen-Koop
https://coderanch.com/wiki/718759/books/Building-World-Backyard-Paul-Wheaton
reply
    Bookmark Topic Watch Topic
  • New Topic