RE: [Openjmx-devel] RMI adaptor and remote notifications

[Carlos Q. <Car...@ge...>]

> -----Original Message-----
> From: Bordet, Simone [mailto:Sim...@co...]
> Sent: 30 January 2002 15:26
> To: OpenJMX-Dev (E-mail)
> Subject: RE: [Openjmx-devel] RMI adaptor and remote notifications
>=20
> Hi,
>=20
> > > > > I've added possibility to receive in the client
> > notifications from
> > a
> > > > > remote MBeanServer.
> > > > >
> > > > > Listeners are always remote, but NotificationFilters may be
> > > > serialized
> > > > to
> > > > > the server and be executed there.
> > > > >
> > > > > Is there any preference on how filters must be treated ?
> > > > >
> > > > > 1) Always as remote, like listeners (will be executed in the
> > client)
> > > > > 2) Always serialized to the server (will executed in the
server)
> > > > I'm sure this is a lot more Network efficient
> > > >
> > > > > 3) try first with 2, if fails fall through to 1
> > > > When may this happen?
> > >
> > > When filter implementation is not serializable.
> > Ok, then my vote is for 3
>=20
> Eh, not that simple.
>=20
> Look at this filter
>=20
> class MyFilter implements NotificationFilter
> {
>    public boolean isNotificationEnabled(Notification n)
>    {
>       List l =3D MBeanServerFactory.findMBeanServer(null);
>       for (Iterator i =3D l.iterator(); i.hasNext();)
>       {
>          MBeanServer s =3D (MBeanServer)i.next();
>          MBeanServerFactory.releaseMBeanServer(s);
>       }
>       return true;
>    }
> }
Would you upload this code to the Agent? How using for instance a web
server in the codebase?
I think this will be always a problem using RMI, and you would normally
run it with a security manager. There are many other things that can be
done if you are uploading code (spyware, viruses, etc...)

>=20
> This will force us to run the agent always under security manager...
>=20
> We want to leave open this security hole, and go for a simpler
> implementation ?
>=20
> We want many remote calls for each notification ?
>=20
> Mumble, mumble...
>=20
> Simon
>=20
> _______________________________________________
> Openjmx-devel mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openjmx-devel