Jdmk _ snmp agent acl

Question

Hi,
I'm using jdmk snmp adaptor to develop an snmp agent. I've a problem in setting the agent accessControl List. In particular I've this accessListFile (jdmk.acl):
acl = {
communities = public
access = read-only
managers = <myIpAddress> }
and in my Agent, I set acl as follow:
SnmpAdaptorServer snmpAdaptor = null;
JdmkAcl theAcl = (JdmkAcl)(snmpAdaptor.getInetAddressAcl());
theAcl.setAuthorizedListFile("myAclPath"+jdmk.acl");
theAcl.rereadTheFile();
No Exception has been raised, but I can access my agent via snmp from various address and with a community different from "public". So It's seems that my acl file doesn't work properly
thank in advance
l

Answer 1

Hi,
You should use a constructor that takes an InetAddressAcl instead:
SnmpAdaptorServer(InetAddressAcl acl, int port);
Simply create the acl in this way:
String aclFileName = .... ;
InetAddressAcl acl = new JdmkAcl("myACL", aclFileName);
int port = ... ;
SnmpAdaptorServer server = new SnmpAdaptorServer(acl,port);
I believe this should work. The point here is that the adaptor has a mode where if you
don't specify any ACL, and the default ACL file doesn't exists, then it will let anybody
connect. If however, you do specify an ACL, then only those hosts/communities specified
in the ACL will be authorized - and if the file doesn't exists, nobody will.
Note: you can also ask any question regarding Java DMK on project OpenDMK user's list:
https://opendmk.dev.java.net/servlets/ProjectMailingListList
Hope this helps,
-- daniel
http://blogs.sun.com/jmxetc