Fixes #21882 deserialization flaw (#21884)

javaee · Jun 22, 2017 · c925e32 · c925e32
1 parent c5be336
commit c925e32
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/...mmon/mbeanserver/src/main/java/org/glassfish/admin/mbeanserver/JMXMPConnectorStarter.java b/...mmon/mbeanserver/src/main/java/org/glassfish/admin/mbeanserver/JMXMPConnectorStarter.java
@@ -40,7 +40,6 @@
 
 package org.glassfish.admin.mbeanserver;
 
-import org.glassfish.grizzly.config.dom.Ssl;
 import org.glassfish.hk2.api.ServiceLocator;
 
 import javax.management.MBeanServer;
@@ -120,6 +119,10 @@ private JMXConnectorServer startJMXMPConnectorServer(final int port)
         final Map<String, Object> env = new HashMap<String, Object>();
         env.put("jmx.remote.protocol.provider.pkgs", "com.sun.jmx.remote.protocol");
         env.put("jmx.remote.protocol.provider.class.loader", this.getClass().getClassLoader());
+        env.put("jmx.remote.rmi.server.credential.types", new String[] {
+                String[].class.getName(),
+                String.class.getName() });
+
         JMXAuthenticator authenticator = getAccessController();
         if (authenticator != null)
         {