1*11be35a1SLionel Sambuc.\" $NetBSD: rpcbind.8,v 1.1 2010/07/26 15:53:00 pooka Exp $ 2*11be35a1SLionel Sambuc.\" @(#)rpcbind.1m 1.19 92/09/14 SMI; from SVr4 3*11be35a1SLionel Sambuc.\" Copyright 1989 AT&T 4*11be35a1SLionel Sambuc.\" Copyright 1991 Sun Microsystems, Inc. 5*11be35a1SLionel Sambuc.Dd October 19, 2008 6*11be35a1SLionel Sambuc.Dt RPCBIND 8 7*11be35a1SLionel Sambuc.Sh NAME 8*11be35a1SLionel Sambuc.Nm rpcbind 9*11be35a1SLionel Sambuc.Nd universal addresses to RPC program number mapper 10*11be35a1SLionel Sambuc.Sh SYNOPSIS 11*11be35a1SLionel Sambuc.Nm 12*11be35a1SLionel Sambuc.Op Fl dilLs 13*11be35a1SLionel Sambuc.Sh DESCRIPTION 14*11be35a1SLionel Sambuc.Nm 15*11be35a1SLionel Sambucis a server that converts 16*11be35a1SLionel Sambuc.Tn RPC 17*11be35a1SLionel Sambucprogram numbers into 18*11be35a1SLionel Sambucuniversal addresses. 19*11be35a1SLionel SambucIt must be running on the host to be able to make 20*11be35a1SLionel Sambuc.Tn RPC 21*11be35a1SLionel Sambuccalls 22*11be35a1SLionel Sambucon a server on that machine. 23*11be35a1SLionel Sambuc.Pp 24*11be35a1SLionel SambucWhen an 25*11be35a1SLionel Sambuc.Tn RPC 26*11be35a1SLionel Sambucservice is started, 27*11be35a1SLionel Sambucit tells 28*11be35a1SLionel Sambuc.Nm 29*11be35a1SLionel Sambucthe address at which it is listening, 30*11be35a1SLionel Sambucand the 31*11be35a1SLionel Sambuc.Tn RPC 32*11be35a1SLionel Sambucprogram numbers it is prepared to serve. 33*11be35a1SLionel SambucWhen a client wishes to make an 34*11be35a1SLionel Sambuc.Tn RPC 35*11be35a1SLionel Sambuccall to a given program number, 36*11be35a1SLionel Sambucit first contacts 37*11be35a1SLionel Sambuc.Nm 38*11be35a1SLionel Sambucon the server machine to determine 39*11be35a1SLionel Sambucthe address where 40*11be35a1SLionel Sambuc.Tn RPC 41*11be35a1SLionel Sambucrequests should be sent. 42*11be35a1SLionel Sambuc.Pp 43*11be35a1SLionel Sambuc.Nm 44*11be35a1SLionel Sambucshould be started before any other RPC service. 45*11be35a1SLionel SambucNormally, standard 46*11be35a1SLionel Sambuc.Tn RPC 47*11be35a1SLionel Sambucservers are started by port monitors, so 48*11be35a1SLionel Sambuc.Nm 49*11be35a1SLionel Sambucmust be started before port monitors are invoked. 50*11be35a1SLionel Sambuc.Pp 51*11be35a1SLionel SambucWhen 52*11be35a1SLionel Sambuc.Nm 53*11be35a1SLionel Sambucis started, it checks that certain name-to-address 54*11be35a1SLionel Sambuctranslation-calls function correctly. 55*11be35a1SLionel SambucIf they fail, the network configuration databases may be corrupt. 56*11be35a1SLionel SambucSince 57*11be35a1SLionel Sambuc.Tn RPC 58*11be35a1SLionel Sambucservices cannot function correctly in this situation, 59*11be35a1SLionel Sambuc.Nm 60*11be35a1SLionel Sambucreports the condition and terminates. 61*11be35a1SLionel Sambuc.Pp 62*11be35a1SLionel Sambuc.Nm 63*11be35a1SLionel Sambuccan only be started by the super-user. 64*11be35a1SLionel Sambuc.Pp 65*11be35a1SLionel SambucAccess control is provided by 66*11be35a1SLionel Sambuc.Pa /etc/hosts.allow 67*11be35a1SLionel Sambucand 68*11be35a1SLionel Sambuc.Pa /etc/hosts.deny , 69*11be35a1SLionel Sambucas described in 70*11be35a1SLionel Sambuc.Xr hosts_access 5 71*11be35a1SLionel Sambucwith daemon name 72*11be35a1SLionel Sambuc.Nm . 73*11be35a1SLionel Sambuc.Sh OPTIONS 74*11be35a1SLionel Sambuc.Bl -tag -width Ds 75*11be35a1SLionel Sambuc.It Fl d 76*11be35a1SLionel SambucRun in debug mode. 77*11be35a1SLionel SambucIn this mode, 78*11be35a1SLionel Sambuc.Nm 79*11be35a1SLionel Sambucwill not fork when it starts, will print additional information 80*11be35a1SLionel Sambucduring operation, and will abort on certain errors. 81*11be35a1SLionel SambucWith this option, the name-to-address translation consistency 82*11be35a1SLionel Sambucchecks are shown in detail. 83*11be35a1SLionel Sambuc.It Fl i 84*11be35a1SLionel Sambuc.Dq insecure 85*11be35a1SLionel Sambucmode. 86*11be35a1SLionel SambucAllows calls to SET and UNSET from any host. 87*11be35a1SLionel SambucNormally 88*11be35a1SLionel Sambuc.Nm 89*11be35a1SLionel Sambucaccepts these requests only from the loopback interface for security reasons. 90*11be35a1SLionel SambucThis change is necessary for programs that were compiled with earlier 91*11be35a1SLionel Sambucversions of the rpc library and do not make those requests using the 92*11be35a1SLionel Sambucloopback interface. 93*11be35a1SLionel Sambuc.It Fl l 94*11be35a1SLionel SambucTurns on libwrap connection logging. 95*11be35a1SLionel Sambuc.It Fl s 96*11be35a1SLionel SambucCauses 97*11be35a1SLionel Sambuc.Nm 98*11be35a1SLionel Sambucto change to the user daemon as soon as possible. 99*11be35a1SLionel SambucThis causes 100*11be35a1SLionel Sambuc.Nm 101*11be35a1SLionel Sambucto use non-privileged ports for outgoing connections, preventing non-privileged 102*11be35a1SLionel Sambucclients from using 103*11be35a1SLionel Sambuc.Nm 104*11be35a1SLionel Sambucto connect to services from a privileged port. 105*11be35a1SLionel Sambuc.It Fl L 106*11be35a1SLionel SambucAllow old-style local connections over the loopback interface. 107*11be35a1SLionel SambucWithout this flag, local connections are only allowed over a local socket, 108*11be35a1SLionel Sambuc.Pa /var/run/rpcbind.sock 109*11be35a1SLionel Sambuc.El 110*11be35a1SLionel Sambuc.Sh NOTES 111*11be35a1SLionel SambucAll RPC servers must be restarted if 112*11be35a1SLionel Sambuc.Nm 113*11be35a1SLionel Sambucis restarted. 114*11be35a1SLionel Sambuc.Sh FILES 115*11be35a1SLionel Sambuc.Bl -tag -width "/var/run/rpcbind.sock" -compact 116*11be35a1SLionel Sambuc.It Pa /var/run/rpcbind.sock 117*11be35a1SLionel Sambuc.It Pa /etc/hosts.allow 118*11be35a1SLionel Sambucexplicit remote host access list. 119*11be35a1SLionel Sambuc.It Pa /etc/hosts.deny 120*11be35a1SLionel Sambucexplicit remote host denial of service list. 121*11be35a1SLionel Sambuc.El 122*11be35a1SLionel Sambuc.Sh SEE ALSO 123*11be35a1SLionel Sambuc.Xr rpcbind 3 , 124*11be35a1SLionel Sambuc.Xr hosts_access 5 , 125*11be35a1SLionel Sambuc.Xr hosts_options 5 , 126*11be35a1SLionel Sambuc.Xr netconfig 5 , 127*11be35a1SLionel Sambuc.Xr rpcinfo 8 128