Check out the following

http://www.jboss.org/community/wiki/SecureTheJmxConsole
http://www.novell.com/support/search.do?cmd=displayKC&sliceId=SAL_Public&externalId=3024921

On my local m/c, I can access JMX console directly without any username. I use JBoss 4.0.5 GA and can access the console using

http://localhost:8080/

where 8080 is the port where JBoss is listening

>>Check out the following

I don't want to secure the web console or JMX console. I just want to login into web console and JMX console

>>http://localhost:8080/

For me it asks for username and password

Whats the JBoss version that you are using?

Jboss 4.2.0

Can you open the following file?
<JBoss root>\server\default\conf\login-config.xml

Search for <application-policy name = "jmx-console">. Under that you would find the user and role properties file that would have the username-password combinations. Please go to the properties file specified by <module-option name="usersProperties"> and you would get the username password combinations.

Also go to <JBoss root>\\server\default\deploy\jmx-console.war\WEB-INF\web.war

Ensure that the security-constraint block is uncommented and below <login-config> block exists after the end of the <security-constraint> block.

<login-config>
   <auth-method>BASIC</auth-method>
   <realm-name><name of application policy from login-config.xml></realm-name>
</login-config>

thats <JBoss root>\\server\default\deploy\jmx-console.war\WEB-INF\web.xml

Thanks for your reply.

I have attached the properties files (changed extendion to txt so that they get uploaded) available inside conf. I have tried with the username and password given here but still not able to log in.


jbossws-roles.txt
jbossws-users.txt
jmx-console-roles.txt
jmx-console-users.txt

If you are able to set this up, will let you know the issue and how to fix it for web console.

Thanks a lot for your help