home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Skunkware 5
/
Skunkware 5.iso
/
src
/
Tools
/
pidentd
/
identd.LOCAL
next >
Wrap
Text File
|
1995-07-30
|
10KB
|
155 lines
IIIIDDDDEEEENNNNTTTTDDDD((((8888)))) UUUUNNNNIIIIXXXX SSSSyyyysssstttteeeemmmm VVVV ((((22227777 MMMMaaaayyyy 1111999999992222)))) IIIIDDDDEEEENNNNTTTTDDDD((((8888))))
NNNNAAAAMMMMEEEE
identd, in.identd - TCP/IP IDENT protocol server
SSSSYYYYNNNNOOOOPPPPSSSSIIIISSSS
////uuuussssrrrr////ssssbbbbiiiinnnn////iiiinnnn....iiiiddddeeeennnnttttdddd [----iiii|----wwww|----bbbb [----tttt<<<<sssseeeeccccoooonnnnddddssss>>>>] [----uuuu<<<<uuuuiiiidddd>>>>]
[----gggg<<<<ggggiiiidddd>>>>] [----pppp<<<<ppppoooorrrrtttt>>>>] [----aaaa<<<<aaaaddddddddrrrreeeessssssss>>>>] [----cccc<<<<cccchhhhaaaarrrrsssseeeetttt>>>>] [----nnnn] [----oooo]
[----eeee] [----llll] [----VVVV] [----mmmm] [----NNNN] [----dddd] [kkkkeeeerrrrnnnneeeellllffffiiiilllleeee[kkkkmmmmeeeemmmmffffiiiilllleeee]]]]]
DDDDEEEESSSSCCCCRRRRIIIIPPPPTTTTIIIIOOOONNNN
iiiiddddeeeennnnttttdddd is a server which implements the TCP/IP proposed
standard IDENT user identification protocol as specified in
the RFC 1413 document.
iiiiddddeeeennnnttttdddd operates by looking up specific TCP/IP connections
and returning the user name of the process owning the
connection.
AAAARRRRGGGGUUUUMMMMEEEENNNNTTTTSSSS
The ----iiii flag, which is the default mode, should be used when
starting the daemon from iiiinnnneeeettttdddd with the "nowait" option in
the ////eeeettttcccc////iiiinnnneeeettttdddd....ccccoooonnnnffff file. Use of this mode will make iiiinnnneeeettttdddd
start one iiiiddddeeeennnnttttdddd daemon for each connection request.
The ----wwww flag should be used when starting the daemon from
iiiinnnneeeettttdddd with the "wait" option in the ////eeeettttcccc////iiiinnnneeeettttdddd....ccccoooonnnnffff file .
This is the prefered mode of operation since that will start
a copy of iiiiddddeeeennnnttttdddd at the first connection request and then
iiiiddddeeeennnnttttdddd will handle subsequent requests without having to do
the nlist lookup in the kernel file for every request as in
the ----iiii mode above. The iiiiddddeeeennnnttttdddd daemon will run either
forever, until a bug makes it crash or a timeout, as
specified by the ----tttt flag, occurs.
The ----bbbb flag can be used to make the daemon run in standalone
mode without the assistance from iiiinnnneeeettttdddd.... This mode is the
least prefered mode since a bug or any other fatal condition
in the server will make it terminate and it will then have
to be restarted manually. Other than that is has the same
advantage as the ----wwww mode in that it parses the nlist only
once.
The ----tttt<<<<sssseeeeccccoooonnnnddddssss>>>> option is used to specify the timeout limit.
This is the number of seconds a server started with the ----wwww
flag will wait for new connections before terminating. The
server is automatically restarted by iiiinnnneeeettttdddd whenever a new
connection is requested if it has terminated. A suitable
value for this is 120 (2 minutes), if used. It defaults to
no timeout (ie, will wait forever, or until a fatal
condition occurs in the server).
The ----uuuu<<<<uuuuiiiidddd>>>> option is used to specify a user id number which
the iiiiddddeeeennnntttt server should switch to after binding itself to
the TCP/IP port if using the ----bbbb mode of operation.
The ----gggg<<<<ggggiiiidddd>>>> option is used to specify a group id number
which the iiiiddddeeeennnntttt server should switch to after binding itself
to the TCP/IP port if using the ----bbbb mode of operation.
The ----pppp<<<<ppppoooorrrrtttt>>>> option is used to specify an alternative port
number to bind to if using the ----bbbb mode of operation. It can
be specified by name or by number. Defaults to the IDENT
port (113).
The ----aaaa<<<<aaaaddddddddrrrreeeessssssss>>>> option is used to specify the local address
to bind the socket to if using the ----bbbb mode of operation. Can
only be specified by IP address and not by domain name.
Defaults to the INADDR_ANY address which normally means all
local addresses.
The ----VVVV flag makes iiiiddddeeeennnnttttdddd display the version number and the
exit.
The ----llll flag tells iiiiddddeeeennnnttttdddd to use the System logging daemon
ssssyyyyssssllllooooggggdddd for logging purposes.
The ----oooo flag tells iiiiddddeeeennnnttttdddd to not reveal the operating system
type it is run on and to instead always return "OTHER".
The ----eeee flag tells iiiiddddeeeennnnttttdddd to always return "UNKNOWN-ERROR"
instead of the "NO-USER" or "INVALID-PORT" errors.
The ----cccc<<<<cccchhhhaaaarrrrsssseeeetttt>>>> flags tells iiiiddddeeeennnnttttdddd to add the optional
(according to the IDENT protocol) character set designator
to the reply generated. <charset> should be a valid
character set as described in the MIME RFC in upper case
characters.
The ----nnnn flags tells iiiiddddeeeennnnttttdddd to always return user numbers
instead of user names if you wish to keep the user names a
secret.
The ----NNNN flag makes iiiiddddeeeennnnttttdddd check for a file ".noident" in each
homedirectory for a user which the daemon is about to return
the user name for. It that file exists then the daemon will
give the error HHHHIIIIDDDDDDDDEEEENNNN----UUUUSSSSEEEERRRR instead of the normal USERID
response.
----mmmm flag makes iiiiddddeeeennnnttttdddd use a mode of operation that will allow
multiple requests to be processed per session. Each request
is specified one per line and the responses will be returned
one per line. The connection will not be closed until the
connecting part closes it's end of the line. PLEASE NOTE
THAT THIS MODE VIOLATES THE PROTOCOL SPECIFICATION AS IT
CURRENTLY STANDS.
The ----dddd flag enables some debugging code that normally should
NOT be enabled since that breaks the protocol and may reveal
information that should not be available to outsiders.
kkkkeeeerrrrnnnneeeellllffffiiiilllleeee defaults to the normally running kernel file.
kkkkmmmmeeeemmmmffffiiiilllleeee defaults to the memory space of the normally
running kernel.
IIIINNNNSSSSTTTTAAAALLLLLLLLAAAATTTTIIIIOOOONNNN
iiiiddddeeeennnnttttdddd is invoked either by the internet server (see
iiiinnnneeeettttdddd(8C) ) for requests to connect to the IDENT port as
indicated by the ////eeeettttcccc////sssseeeerrrrvvvviiiicccceeeessss file (see sssseeeerrrrvvvviiiicccceeeessss(5) ) when
using the ----wwww or ----iiii modes of operation or started manually by
using the ----bbbb mode of operation.
EEEEXXXXAAAAMMMMPPPPLLLLEEEESSSS
Assuming the server is located in ////uuuussssrrrr////eeeettttcccc////iiiinnnn....iiiiddddeeeennnnttttdddd one can
put either:
ident stream tcp wait sys /usr/etc/in.identd in.identd -w
-t120
or:
ident stream tcp nowait sys /usr/etc/in.identd in.identd -i
into the ////eeeettttcccc////iiiinnnneeeettttdddd....ccccoooonnnnffff file. User "sys" should have enough
rights to READ the kernel but NOT to write to it.
To start it using the ----bbbb mode of operation one can put a
line like this into the ////eeeettttcccc////rrrrcccc....llllooooccccaaaallll file:
/usr/etc/in.identd -b -u2 -g2
This will make it run in the background as user 2, group 2
(user "sys", group "kmem" on SunOS 4.1.1).
SSSSEEEEEEEE AAAALLLLSSSSOOOO
aaaauuuutttthhhhuuuusssseeeerrrr(3) iiiinnnneeeettttdddd....ccccoooonnnnffff(5)
BBBBUUUUGGGGSSSS
The handling of fatal errors could be better.
(printed 7/30/95)