Within a WebLogic Server domain, you can specify which JMX services are available. For example, in a production environment you can disable the WebLogic Server editing service and therefore prevent most runtime changes to the domain.
The following attributes of JMXMBean
determine which JMX services are available in a domain (see "JMXMBean" in Oracle Fusion Middleware Oracle WebLogic Server MBean Reference):
EditMBeanServerEnabled
controls whether JMX clients, including utilities such as the Administration Console and the WebLogic Scripting Tool, can modify a domain's configuration.
DomainMBeanServerEnabled
controls whether JMX clients can access all runtime MBeans and read-only configuration MBeans through a single connection to the Domain Runtime MBean Server.
RuntimeMBeanServerEnabled
controls whether JMX clients can access a specific server's runtime MBeans and read-only configuration MBeans through the server's Runtime MBean Server.
PlatformMBeanServerEnabled
controls whether all WebLogic Server instances initialize the JDK platform MBean server. PlatformMBeanServerUsed
controls whether all WebLogic server instances start their Runtime MBean Servers as the JDK platform MBean server. This makes it possible to access WebLogic Server MBeans and the JVM platform MBeans from a single MBean server.
CompatibilityMBeanServerEnabled
enables JMX clients to use the deprecated weblogic.management.MBeanHome
interface to access WebLogic Server MBeans.
ManagementEJBEnabled
controls whether the current WebLogic Server domain supports the Java EE Management APIs.
The following example uses the WebLogic Scripting Tool (WLST) to set the JMXMBean
EditMBeanServerEnabled
attribute to false
. It assumes that you are running WLST on a Windows computer, that you created a domain under c:\mydomain
, and that you have not deleted the scripts that WebLogic Server creates along with your domain.
Note:
The following steps prevent JMX clients (including the WebLogic Server Administration Console and the WebLogic Scripting Tool in online mode) from modifying the domain's configuration. You can still modify the domain configuration through the offline editing feature of WebLogic Scripting Tool.These steps do not prevent JMX clients from deploying or undeploying modules because the WebLogic Server deployment service does not use JMX.
Start the domain's Administration Server.
In a command prompt, set up the required environment by running the following script:
c:\mydomain\setDomainEnv.cmd
In the same command prompt, enter the following commands:
java weblogic.WLST
connect('weblogic','weblogic')
edit()
startEdit()
cd('JMX/mydomain')
set('EditMBeanServerEnabled','false')
activate()
exit()