1. Use dsconfig to enable the JMX Connection Handler.
    $ bin/dsconfig set-connection-handler-prop \ 
      --handler-name "JMX Connection Handler" \ 
      --set enabled:true \ 
      --set listen-port:1689
  2. Add a new non-root user account with the jmx-read and jmx-notify privileges. This account can be added using the ldapmodify tool using an LDIF representation like:
    dn: cn=JMX User,cn=Root DNs,cn=config
    changetype: add
    objectClass: top
    objectClass: person
    objectClass: organizationalPerson
    objectClass: inetOrgPerson
    objectClass: ds-cfg-root-dn-user
    givenName: JMX
    sn: User
    cn: JMX User
    userPassword: password
    ds-cfg-inherit-default-root-privileges: false
    ds-cfg-alternate-bind-dn: cn=JMX User
    ds-privilege-name: jmx-read
    ds-privilege-name: jmx-notify