Question about JBoss default password

Thread view:

Adam Sandler - 22 Jun 2008 03:32 GMT

Hello,

I have JBoss 4.2.2.GA running. When I open a browser and use this
URL, http://localhost:8080, I can see the administration console
successfully.

However, if I leave the port off the address and use this URL,
http://localhost, I get a prompt to enter password and username. I
have no idea what the credentials are. I've looked at
http://docs.jboss.org/jbossas/getting_started/v4/html/install.html and
\server\all\conf\login-config.xml and neither resource lists what
username and password to use.

Does anyone know, on a fresh install of JBoss, what the username and
password are to access http://localhost? Suggestions are greatly
appreciated.

Thanks!

Reply to this Message

Owen Jacobson - 22 Jun 2008 03:38 GMT

> Hello,
>
[quoted text clipped - 12 lines]
>
> Thanks!

A stock JBoss distribution does not attempt to bind to port 80. Since
portless HTTP URLs refer to port 80, odds are good that the auth
dialog is being provoked by another server entirely -- do you have
apache set up to proxy requests to JBoss? If so, have you checked its
auth config?

-o

Reply to this Message

Adam Sandler - 25 Jun 2008 16:03 GMT

> do you have
> apache set up to proxy requests to JBoss? If so, have you checked its
> auth config?

Not explicitly I don't... but doesn't the JBoss install come with
elements of apache? If so, thats where the requests are being
handled. If not, I have no idea what is proxying the requests as I
haven't loaded any other servers on the box.

I found this link http://httpd.apache.org/docs/2.2/howto/auth.html but
it's written for UNIX. Unfortunately, I'm running on a Windows box
for these questions. Does using htpasswd still work with Windows or
is there a properties file somewhere where apache stores account
information?

Thanks!

Reply to this Message

Owen Jacobson - 25 Jun 2008 17:14 GMT

> > do you have
> > apache set up to proxy requests to JBoss? If so, have you checked its
[quoted text clipped - 4 lines]
> handled. If not, I have no idea what is proxying the requests as I
> haven't loaded any other servers on the box.

JBoss includes Apache Tomcat (not Apache HTTPD) as its servlet
container. Apache Tomcat is not configured to listen on port 80 by
default, either, only on 8080 and a handful of other ports in the same
area.

You'll probably want to find a tool that can tell you what
applications have what ports open and use it to identify what program
is actually listening on port 80. If it really is JBoss, you should
be able to find the passwords in <server name>/conf/props/ somewhere
-- that's where JBoss keeps the properties files for its default auth
configurations.

> I found this linkhttp://httpd.apache.org/docs/2.2/howto/auth.htmlbut
> it's written for UNIX. Unfortunately, I'm running on a Windows box
> for these questions. Does using htpasswd still work with Windows or
> is there a properties file somewhere where apache stores account
> information?

Apache HTTPD's mod_authz_basic module uses the same format for storing
passwords regardless of platform.

Reply to this Message

Neil - Salem, MA USA - 25 Jun 2008 19:42 GMT

> [...snip...]
>
[quoted text clipped - 3 lines]
>
> [...snip...]

On a windows box, "netstat -ano" will show used ports and the process IDs of
the processes using those ports.

Process Monitor from Sysinternals (
http://technet.microsoft.com:80/en-us/sysinternals/bb896645.aspx ) will give
details about those processes and process IDs.

I'm unix and linux challenged so I can't speak (intelligently) about similar
utilities for those operating systems.

Neil - Salem, MA USA

Reply to this Message

Lew - 26 Jun 2008 00:22 GMT

> On a windows box, "netstat -ano" will show used ports and the process IDs of
> the processes using those ports.

> I'm unix and linux challenged so I can't speak (intelligently) about similar
> utilities for those operating systems.

Linux:
$ netstat --help
usage: netstat [-veenNcCF] [<Af>] -r netstat {-V|--version|-h|--help}
netstat [-vnNcaeol] [<Socket> ...]
netstat { [-veenNac] -i | [-cnNe] -M | -s }

-r, --route display routing table
-i, --interfaces display interface table
-g, --groups display multicast group memberships
-s, --statistics display networking statistics (like SNMP)
-M, --masquerade display masqueraded connections

-v, --verbose be verbose
-n, --numeric don't resolve names
--numeric-hosts don't resolve host names
--numeric-ports don't resolve port names
--numeric-users don't resolve user names
-N, --symbolic resolve hardware names
-e, --extend display other/more information
-p, --programs display PID/Program name for sockets
-c, --continuous continuous listing

-l, --listening display listening server sockets
-a, --all, --listening display all sockets (default: connected)
-o, --timers display timers
-F, --fib display Forwarding Information Base (default)
-C, --cache display routing cache instead of FIB

<Socket>={-t|--tcp} {-u|--udp} {-w|--raw} {-x|--unix} --ax25 --ipx --netrom
<AF>=Use '-6|-4' or '-A <af>' or '--<af>'; default: inet
List of possible address families (which support routing):
inet (DARPA Internet) inet6 (IPv6) ax25 (AMPR AX.25)
netrom (AMPR NET/ROM) ipx (Novell IPX) ddp (Appletalk DDP)
x25 (CCITT X.25)

Signature

Lew

Reply to this Message

Adam Sandler - 26 Jun 2008 02:31 GMT

> You'll probably want to find a tool that can tell you what
> applications have what ports open and use it to identify what program
> is actually listening on port 80.

I have Active Ports on my machine and I see that inetinfo.exe is
listening to port 80. So it looks like I'll have to look at the
authentication for IIS.

Thanks for all your assistance -- much appreciated!!!

Reply to this Message

Question about JBoss default password

Free Magazines