Turn on JMX authentication for the Terracotta server. An empty tag (<authentication />) defaults to the standard Java JMX authentication mechanism referring to password and access files in $JAVA_HOME/jre/lib/management:

You must modify these files as follows (or, if none exist create them).

jmxremote.password: Add a line to the end of the file declaring a username and password followed by a carriage return:

jmxremote.access: Add the following line (with a carriage return) to the end of your file:

Be sure to assign the appropriate permissions to the file. For example, in *NIX:

For information on alternatives to JMX authentication, see the BigMemory Max Security Guide.

Note that version 4.x does not support HTTP authentication.