How to enable the JMX in tomcat, visit here: http://tomcat.apache.org/tomcat-6.0-doc/monitoring.html. If we want to enable remote visit by JMX, we should pay attention to the tip:"The password file should be read-only and only accessible by the operating system user Tomcat is running as". This tip is very important, if we don't restrict this file as it said ,we will got an error: "Password file read access must be restricted", and the tomcat will exit.
And this article:http://docs.oracle.com/javase/1.5.0/docs/guide/management/agent.html#remote, said "Remote monitoring and management requires security, to ensure that unauthorized persons cannot control or monitor your application". This means the restriction is just for safe.
本文出自:冯立彬的博客