jdk/src/java.management/share/conf/snmp.acl.template
author chegar
Wed, 03 Dec 2014 14:22:58 +0000
changeset 27565 729f9700483a
parent 25859 3317bb8137f4
permissions -rw-r--r--
8049367: Modular Run-Time Images Reviewed-by: chegar, dfuchs, ihse, joehw, mullan, psandoz, wetmore Contributed-by: alan.bateman@oracle.com, alex.buckley@oracle.com, bradford.wetmore@oracle.com, chris.hegarty@oracle.com, erik.joelsson@oracle.com, james.laskey@oracle.com, jonathan.gibbons@oracle.com, karen.kinnear@oracle.com, magnus.ihse.bursie@oracle.com, mandy.chung@oracle.com, mark.reinhold@oracle.com, paul.sandoz@oracle.com, sundararajan.athijegannathan@oracle.com
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
     1
# ----------------------------------------------------------------------
90ce3da70b43 Initial load
duke
parents:
diff changeset
     2
#           Template for SNMP Access Control List File
90ce3da70b43 Initial load
duke
parents:
diff changeset
     3
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
     4
# o Copy this template to snmp.acl
90ce3da70b43 Initial load
duke
parents:
diff changeset
     5
# o Set access control for SNMP support
90ce3da70b43 Initial load
duke
parents:
diff changeset
     6
# o Change the permission of snmp.acl to be read-only
90ce3da70b43 Initial load
duke
parents:
diff changeset
     7
#   by the owner.
90ce3da70b43 Initial load
duke
parents:
diff changeset
     8
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
     9
# See below for the location of snmp.acl file.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    10
# ----------------------------------------------------------------------
90ce3da70b43 Initial load
duke
parents:
diff changeset
    11
90ce3da70b43 Initial load
duke
parents:
diff changeset
    12
############################################################
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    13
#            SNMP Access Control List File
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    14
############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    15
#
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    16
# Default location of this file is $JRE/conf/management/snmp.acl.
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    17
# You can specify an alternate location by specifying a property in
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    18
# the management config file $JRE/conf/management/management.properties
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    19
# or by specifying a system property (See that file for details).
90ce3da70b43 Initial load
duke
parents:
diff changeset
    20
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    21
90ce3da70b43 Initial load
duke
parents:
diff changeset
    22
90ce3da70b43 Initial load
duke
parents:
diff changeset
    23
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    24
#        File permissions of the snmp.acl file
90ce3da70b43 Initial load
duke
parents:
diff changeset
    25
##############################################################
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    26
#
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    27
#      Since there are cleartext community strings stored in this file,
90ce3da70b43 Initial load
duke
parents:
diff changeset
    28
#      this ACL file must be readable by ONLY the owner,
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    29
#      otherwise the program will exit with an error.
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    30
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    31
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    32
#		Format of the acl group
90ce3da70b43 Initial load
duke
parents:
diff changeset
    33
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    34
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    35
# communities: a list of SNMP community strings to which the
90ce3da70b43 Initial load
duke
parents:
diff changeset
    36
#              access control applies separated by commas.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    37
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    38
# access: either "read-only" or "read-write".
90ce3da70b43 Initial load
duke
parents:
diff changeset
    39
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    40
# managers: a list of hosts to be granted the access rights.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    41
#    Each can be expressed as any one of the following:
90ce3da70b43 Initial load
duke
parents:
diff changeset
    42
#    - hostname: hubble
90ce3da70b43 Initial load
duke
parents:
diff changeset
    43
#    - ip v4 and v6 addresses: 123.456.789.12 , fe80::a00:20ff:fe9b:ea82
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    44
#    - ip v4 and v6 netmask prefix notation: 123.456.789.0/24,
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    45
#         fe80::a00:20ff:fe9b:ea82/64
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    46
#      see RFC 2373 (http://www.ietf.org/rfc/rfc2373.txt)
90ce3da70b43 Initial load
duke
parents:
diff changeset
    47
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    48
# An example of two community groups for multiple hosts:
90ce3da70b43 Initial load
duke
parents:
diff changeset
    49
#    acl = {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    50
#     {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    51
#       communities = public, private
90ce3da70b43 Initial load
duke
parents:
diff changeset
    52
#       access = read-only
90ce3da70b43 Initial load
duke
parents:
diff changeset
    53
#       managers = hubble, snowbell, nanak
90ce3da70b43 Initial load
duke
parents:
diff changeset
    54
#     }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    55
#     {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    56
#       communities = jerry
90ce3da70b43 Initial load
duke
parents:
diff changeset
    57
#       access = read-write
90ce3da70b43 Initial load
duke
parents:
diff changeset
    58
#       managers = hubble, telescope
90ce3da70b43 Initial load
duke
parents:
diff changeset
    59
#     }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    60
#    }
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    61
#
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    62
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    63
#                   Format of the trap group
90ce3da70b43 Initial load
duke
parents:
diff changeset
    64
##############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    65
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    66
# trap-community: a single SNMP community string that will be included
90ce3da70b43 Initial load
duke
parents:
diff changeset
    67
#                 in  the traps sent to the hosts.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    68
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    69
# hosts: a list of hosts to which the SNMP agent will send traps.
90ce3da70b43 Initial load
duke
parents:
diff changeset
    70
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    71
# An example of two trap community definitions for multiple hosts:
90ce3da70b43 Initial load
duke
parents:
diff changeset
    72
#    trap = {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    73
#      {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    74
#        trap-community = public
90ce3da70b43 Initial load
duke
parents:
diff changeset
    75
#        hosts = hubble, snowbell
90ce3da70b43 Initial load
duke
parents:
diff changeset
    76
#      }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    77
#      {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    78
#        trap-community = private
90ce3da70b43 Initial load
duke
parents:
diff changeset
    79
#        hosts = telescope
90ce3da70b43 Initial load
duke
parents:
diff changeset
    80
#      }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    81
#    }
90ce3da70b43 Initial load
duke
parents:
diff changeset
    82
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    83
############################################################
90ce3da70b43 Initial load
duke
parents:
diff changeset
    84
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    85
#  Update the community strings (public and private) below
90ce3da70b43 Initial load
duke
parents:
diff changeset
    86
#  before copying this template file
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
    87
#
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
    88
# Common SNMP ACL Example
90ce3da70b43 Initial load
duke
parents:
diff changeset
    89
# ------------------------
90ce3da70b43 Initial load
duke
parents:
diff changeset
    90
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    91
# o Only localhost can connect, and access rights
90ce3da70b43 Initial load
duke
parents:
diff changeset
    92
#   are limited to read-only
90ce3da70b43 Initial load
duke
parents:
diff changeset
    93
# o Traps are sent to localhost only
90ce3da70b43 Initial load
duke
parents:
diff changeset
    94
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    95
#
90ce3da70b43 Initial load
duke
parents:
diff changeset
    96
# acl = {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    97
#  {
90ce3da70b43 Initial load
duke
parents:
diff changeset
    98
#    communities = public, private
90ce3da70b43 Initial load
duke
parents:
diff changeset
    99
#    access = read-only
90ce3da70b43 Initial load
duke
parents:
diff changeset
   100
#    managers = localhost
90ce3da70b43 Initial load
duke
parents:
diff changeset
   101
#  }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   102
# }
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
   103
#
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
   104
#
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
   105
# trap = {
90ce3da70b43 Initial load
duke
parents:
diff changeset
   106
#   {
90ce3da70b43 Initial load
duke
parents:
diff changeset
   107
#     trap-community = public
27565
729f9700483a 8049367: Modular Run-Time Images
chegar
parents: 25859
diff changeset
   108
#     hosts = localhost
2
90ce3da70b43 Initial load
duke
parents:
diff changeset
   109
#   }
90ce3da70b43 Initial load
duke
parents:
diff changeset
   110
# }