Specifies a set of host names or address masks that determine the clients that are allowed to establish connections to this Connection Handler.Valid values include a host name, a fully qualified domain name, a domain name, an IP address, or a subnetwork with subnetwork mask.
Default Value
All clients with addresses that do not match an address on the deny list are allowed. If there is no deny list, then all clients are allowed.
Allowed Values
An IP address mask
Multi-valued
Yes
Required
No
Admin Action Required
None. Changes to this property take effect immediately and do not interfere with connections that may have already been established.
Advanced Property
No
Read-only
No
denied-client
Description
Specifies a set of host names or address masks that determine the clients that are not allowed to establish connections to this Connection Handler.Valid values include a host name, a fully qualified domain name, a domain name, an IP address, or a subnetwork with subnetwork mask. If both allowed and denied client masks are defined and a client connection matches one or more masks in both lists, then the connection is denied. If only a denied list is specified, then any client not matching a mask in that list is allowed.
Default Value
If an allow list is specified, then only clients with addresses on the allow list are allowed. Otherwise, all clients are allowed.
Allowed Values
An IP address mask
Multi-valued
Yes
Required
No
Admin Action Required
None. Changes to this property take effect immediately and do not interfere with connections that may have already been established.
Advanced Property
No
Read-only
No
enabled
Description
Indicates whether the Connection Handler is enabled.
Default Value
None
Allowed Values
true
false
Multi-valued
No
Required
Yes
Admin Action Required
None
Advanced Property
No
Read-only
No
key-manager-provider
Description
Specifies the name of the key manager that should be used with this JMX Connection Handler .
Default Value
None
Allowed Values
The DN of any Key Manager Provider. The referenced key manager provider must be enabled when the JMX Connection Handler is enabled and configured to use SSL.
Multi-valued
No
Required
No
Admin Action Required
None. Changes to this property take effect immediately, but only for subsequent attempts to access the key manager provider for associated client connections.
Advanced Property
No
Read-only
No
listen-address
Description
Specifies the address on which this JMX Connection Handler should listen for connections from JMX clients.If no value is provided, then the JMX Connection Handler listens on all interfaces.
Default Value
0.0.0.0
Allowed Values
An IP address
Multi-valued
No
Required
No
Admin Action Required
Restart the server
Advanced Property
No
Read-only
No
listen-port
Description
Specifies the port number on which the JMX Connection Handler will listen for connections from clients.Only a single port number may be provided.
Default Value
None
Allowed Values
An integer value. Lower value is 1. Upper value is 65535 .
Multi-valued
No
Required
Yes
Admin Action Required
The JMX Connection Handler must be disabled and re-enabled for changes to this setting to take effect
Advanced Property
No
Read-only
No
rmi-port
Description
Specifies the port number on which the JMX RMI service will listen for connections from clients. A value of 0 indicates the service to choose a port of its own.If the value provided is different than 0, the value will be used as the RMI port. Otherwise, the RMI service will choose a port of its own.
Default Value
0
Allowed Values
An integer value. Lower value is 0. Upper value is 65535 .
Multi-valued
No
Required
No
Admin Action Required
The JMX Connection Handler must be disabled and re-enabled for changes to this setting to take effect
Advanced Property
No
Read-only
No
ssl-cert-nickname
Description
Specifies the nicknames (also called the aliases) of the keys or key pairs that the JMX Connection Handler should use when performing SSL communication. The property can be used multiple times (referencing different nicknames) when server certificates with different public key algorithms are used in parallel (for example, RSA, DSA, and ECC-based algorithms). When a nickname refers to an asymmetric (public/private) key pair, the nickname for the public key certificate and associated private key entry must match exactly. A single nickname is used to retrieve both the public key and the private key.This is only applicable when the JMX Connection Handler is configured to use SSL.
Default Value
Let the server decide.
Allowed Values
A String
Multi-valued
Yes
Required
No
Admin Action Required
The JMX Connection Handler must be disabled and re-enabled for changes to this setting to take effect
Advanced Property
No
Read-only
No
use-ssl
Description
Indicates whether the JMX Connection Handler should use SSL.If enabled, the JMX Connection Handler will use SSL to encrypt communication with the clients.
Default Value
false
Allowed Values
true
false
Multi-valued
No
Required
No
Admin Action Required
The JMX Connection Handler must be disabled and re-enabled for changes to this setting to take effect
Advanced Property
No
Read-only
No
Advanced Properties
java-class
Description
Specifies the fully-qualified name of the Java class that provides the JMX Connection Handler implementation.