Configuring the Other NFS Daemons and Services

If you want to use some of the other NFS services, like the Remote Execution Facility (REX) or the rup(1) and rusers(1) commands, this section tells you how to enable those daemons and services. This section tells you how to perform the following tasks:

Enabling Other NFS Services

In the /etc/inetd.conf file, use a text editor to uncomment the lines that begin with “rpc.” (Delete the sharp sign [#] in the first column.)
If the lines do not exist, type them into the /etc/inetd.conf file. Table 2-8 “Other NFS Services” gives the line you need to enter for each NFS service.
If NFS is not yet running on your system, issue the following command:
/sbin/init.d/nfs.client start
Issue the following command to force inetd to read its configuration file:
/usr/sbin/inetd -c




	CAUTION: Do not issue the `/usr/sbin/inetd` command if NFS is not yet running on your system. The NFS startup script starts the `rpcbind`(1M) process, which must be running before you start `inetd`.

Table 2-8 “Other NFS Services” lists the NFS daemons and services that can be started by the inetd daemon. It briefly describes each one and tells you which man pages you can read for more information. It also gives the line that configures each service in the inetd.conf file.

You cannot use SAM to enable the other NFS services.

Table 2-8 Other NFS Services

rexd

The rpc.rexd program is the server for the on command, which starts the Remote Execution Facility (REX). The on command sends a command to be executed on a remote system. The rpc.rexd program on the remote system executes the command, simulating the environment of the user who issued the on command. See Chapter 7 “Configuring and Using the Remote Execution Facility (REX)” or see man pages rexd(1M) and on(1). The following line configures rexd in inetd.conf:

rpc stream tcp nowait root /usr/sbin/rpc.rexd 100017 1 rpc.rexd

rstatd

The rpc.rstatd program answers requests from the rup command, which collects and displays status information about the machines on the local network. For more information, see man pages rstatd(1M) and rup(1). The following line configures rstatd in inetd.conf:

rpc dgram udp wait root /usr/lib/netsvc/rstat/rpc.rstatd 100001 1-3 \
rpc.rstatd

rusersd

The rpc.rusersd program responds to requests from the rusers command, which collects and displays information about all users logged into the machines on the local network. For more information, see man pages rusersd(1M) and rusers(1). The following line configures rusersd in inetd.conf:

rpc dgram udp wait root /usr/lib/netsvc/rusers/rpc.rusersd 100002 1-2 \
rpc.rusersd

rwalld

The rpc.rwalld program handles requests from the rwall program. The rwall program sends a message to a specified machine where the rpc.rwalld program is running, and the message is written to all users logged onto the machine. For more information, see man pages rwalld(1M) and rwall(1M). The following line configures rwalld in inetd.conf:

rpc dgram udp wait root /usr/lib/netsvc/rwall/rpc.rwalld 100008 1 \
rpc.rwalld

sprayd

The rpc.sprayd program is the server for the spray command, which sends a stream of packets to a specified host and then reports how many were received and how fast. For more information, see man pages sprayd(1M) and spray(1M). The following line configures sprayd in inetd.conf:

rpc dgram udp wait root /usr/lib/netsvc/spray/rpc.sprayd 100012 1 \
rpc.sprayd

rquotad

The rpc.rquotad program responds to requests from the quota command, which displays information about a user’s disk usage and limits. For more information, see man pages rquotad(1M) and quota(1). The following line configures rquotad in inetd.conf:

rpc dgram udp wait root /usr/sbin/rpc.rquotad 100011 1 rpc.rquotad

Restricting Access to Other NFS Services

In the /var/adm/inetd.sec file, create a line with the following syntax for each service to which you want to restrict access:
service {allow} host_or_network [host_or_network...] {deny}

If the /var/adm/inetd.sec file does not exist, you will have to create it.

service must match one of the service names in the /etc/rpc file.

Specify either allow or deny but not both. Enter only one line per service.

host_or_network can be either an official host name or network name or an IP address. Any of the four numbers in an IP address can be specified as a range (for example, 1-28) or the wildcard character (*).

The inetd.sec file is checked only when the service is started. If a service remains active and accepts more requests without being restarted, the inetd.sec file is not checked again.

You can use SAM to modify the /var/adm/inetd.sec file.

For more information see the man pages inetd.conf(4) and inetd.sec(4).

Examples from `/var/adm/inetd.sec`

The following example allows only hosts on subnets 15.13.2.0 through 15.13.12.0 to use the spray command:

sprayd allow 15.13.2-12.0

The following example prevents host cauliflower from using the rwall command:

rwalld deny cauliflower

Configuring the Other NFS Daemons and Services

Technical documentation

» Table of Contents

» Index

Enabling Other NFS Services

Restricting Access to Other NFS Services

Examples from `/var/adm/inetd.sec`

Configuring the Other NFS Daemons and Services

Technical documentation

» Table of Contents

» Index

Enabling Other NFS Services

Restricting Access to Other NFS Services

Examples from /var/adm/inetd.sec

Examples from `/var/adm/inetd.sec`