JBoss.org Community Documentation
The web-console.war
found in the deploy/management
directory is another web application view into the JMX microkernel. This uses a combination of an applet and a HTML view and provides the same level of access to admin functionality as the jmx-console.war
. As such, it should either be secured or removed. The web-console.war
contains commented out templates for basic security in its WEB-INF/web.xml
as well as commented out setup for a security domain in WEB-INF/jboss-web.xml
.